List of Figures

1-1 Java 2 Security Model

1-2 Login Modules

1-3 Role-Based Access Control

2-1 OC4J Security Architecture

6-1 Simplified Directory Information Tree for the Identity Management Realm

6-2 Global JAZNContext Subtree

6-3 Realm-Specific Subtree

6-4 Subscriber JAZNContext Subtree

6-5 OracleAS Single Sign-On and J2EE Environments

10-1 COREid Architecture

11-1 Oracle Component Integration in SSL-Enabled J2EE Environments

14-1 End-to-End Security Role Configuration

14-2 Security Role References

14-3 Security Role Mapping

14-4 Subject Propagation

16-1 Flow Chart of Choices for OC4J Container-Managed Sign-On

16-2 Component-Managed Sign-On

16-3 Container-Managed Sign-On

C-1 Admintool Shell Directory Structure

C-2 Sample Shell Directory Structure