Stacked authentication

The Java version of the Endeca Access Control System supports stacked authentication.

In the stacked authentication configuration, both login plug-ins are used to authenticate the user.

For example, you can use the LDAPLoginModule plug-in to authenticate the username and password of the end-user and then use the FileLoginModule plug-in to retrieve that end user’s group affiliations.

This flexibility is important to a site that has a master LDAP directory, but wants to allow additional access control to a small number of users who can be supported by one administrator. The administrator can specify group membership via the local file, which is simple to maintain.