
480 WebSphere Application Server V8.5 Concepts, Planning, and Design Guide
Although the applications remain unaware of the underlying authentication technologies, they
need to contain specific code to take advantage of JAAS. If a new JAAS module is
plugged-in, the application works without a single modification of its code.
A typical JAAS-secured application has the following parts:
The main application that handles the login procedure and runs the secured code under
the authenticated subject
The action that is started from the main application under a specific subject
When using JAAS to authenticate a user, a
subject is created to represent ...