Configuring Jetspeed-2 Security

An overview of Jetspeed-2 security architecture is available here .

Guide to Authentication Configuration

Jetspeed-2 provides a LoginModule implementation that leverage the security SPI model to interact with multiple authentication mechanisms.

Jetspeed authentication configuration is managed by the security-spi-atn.xml located in the portal application assembly directory. Jetspeed-2 supports authentication against:

Guide to Authorization Configuration

Jetspeed-2 provides a relational database backed JAAS policy implementation.

Jetspeed-2 authorization implementation relies on a SPI model as well and is configured through security-spi-atz.xml. Configuration details are available here.