(Historical page)
OTIS Home?
OTIS Authentication
Use Cases
Requirements
- The application needs to authenticate and perform actions on behalf of its users.
- The application needs to authenticate users and perform actions on behalf of other users.
- The application needs to allow users to assume roles and perform actions within those roles.
- These relationships should be trackable and reportable for audit purposes.
Architecture
API Design
The ISIL OTIS Session manager can be used to authenticate an identity to the OTIS service. The authentication materials are supplied to the BanditTokenFactory which will generate an BanditToken which can then be validated via the BanditSession::validateToken(). For authentication material token types, authentication is perform as part of the token validation. The format of authentication materials tokens is described ????.
