Supported Security Features

Sun Java System Web Server 7.0 provides highly secure, interoperable, and distributed component computing based on the Java EE security model. The security goals for Sun Java System Web Server 7.0 include the following:

• Full compliance with the Java Servlet 2.4 security model, including role-based authorization. For more information, see the Security chapter in the Java Servlet 2.4 specification at

  http://java.sun.com/products/servlet/download.html.

• Support for single sign-on across all Sun Java System Web Server 7.0 applications within a single security domain.

• Support for several underlying authentication realms, such as simple file and LDAP. Certificate authentication is also supported for SSL client authentication. Solaris OS platform authentication is also supported.

• Support for declarative security through Sun Java System Web Server 7.0 specific XML-based role mapping.

• Support for Java Security Manager enforcement.

For more information about Java EE security, see the Chapter 6, Certificates and Keys, in Sun Java System Web Server 7.0 Administrator’s Guide.