Introduction

Oracle Application Server provides a comprehensive, integrated set of security services for deploying applications and data on the Web. These standards-based services ensure that critical business information and applications can be exposed safely without compromising system scalability, usability, or performance. Oracle Application Server security services include user-oriented mechanisms, such as strong authentication and single sign-on, and centralized user authorization and provisioning with Oracle Internet Directory, an LDAP v3-compliant directory. They include data protection mechanisms, such as a flexible data access control model for protection of stored data, cryptographic services such as Secure Sockets Layer (SSL) and public key infrastructure (PKI) for protection of data in transmission through the network, and mechanisms such as Java Authentication and Authorization Service (JAAS) to support the building, integration, and deployment of secure applications.