Security Summary

Oracle Application Server security services include strong authentication and single sign-on, centralized user authorization, a flexible data access control model, cryptographic services, and mechanisms for the integration and deployment of secure applications.
Within the security realm, Oracle Identity Management provides user information management through an integrated infrastructure.
Oracle Identity Management components include: Oracle Internet Directory, Oracle Application Server Single Sign-On, Oracle Application Server Certificate Authority, and Oracle Application Server Java Authentication and Authorization Service (JAAS) Provider.
Oracle Internet Directory is an LDAP v3 service that provides centralized management of user accounts, preferences, and address books, as well as optional self-service editing of user account information.
Oracle Application Server Single Sign-On is fully integrated with Oracle Internet Directory, which provides support for LDAP-based user and password management.
Oracle Application Server Certificate Authority is a fully standards-compliant component of the Oracle PKI solution, allowing Web-based certificate management and administration.
The OracleAS JAAS Provider implementation provides authentication, authorization, and delegation for Web and EJB components.