1/9

Contents

Title and Copyright Information

Preface

• Audience
• Related Documentation
• Documentation Accessibility

1 MSS Security Overview

• Basic Security Considerations
• Overview of MSS Security
• Understanding the MSS Environment
• Recommended Deployment Configurations
• Operating System Security
• Oracle Database Security
  • Data Encryption
  • Secure Database Connections
• Oracle WebLogic Server Security

2 Performing a Secure MSS Installation

• Installing MSS Securely

3 Implementing MSS Security

• Securing the Application
• Planning Application Authorization
  • Learning How the Application Works
    • Pre-Implementation Checklist
  • Designing the Security Model
    • Identifying MSS Users
    • Understanding Groups and Permissions
    • Identifying Logical Groups of Users
    • Associating Users with Groups
• Implementing Application Security
  • Adding New Users and Groups
  • Adding New Users That Use a Non-Oracle Authentication Solution
    • Adding Users Using the New Option for a Non-Oracle Authentication Solution
  • Adding Users Using the New From Option for a Non-Oracle Authentication Solution
  • Authorizing System Administrators
  • Validating API Logons
    • Adding Registered Users to MSSRole for Accessing EJB Methods Externally
    • Adding Registered Users to Access External JMS Queues
    • Adding APPJMSUser User for JMS Messaging Through Gateway Events
    • Accessing MSS Web Services Using a WebLogic User
  • Tracking Logons
  • Managing Application Passwords
    • Setting the Password Preference
    • Specifying a Password Expiration Date
    • Maintaining User Passwords
  • Creating Additional Security Administrators
  • Assigning MSS Permissions
    • Understanding Permissions
    • Window Permissions
    • Control Permissions
    • Pop-Up Menu Permissions
    • Check Point Permissions
  • Scanning Windows and Controls Into the Database
• Creating MSS Security Reports
• Managing Utilities Security
• Managing File Permissions
• Changing Role Passwords

4 Security Considerations for Developers

• MSS API Security

5 Enabling MSS with Single Sign-On Functionality

• About Single Sign-On Functionality
• Integrating MSS with ESSO Overview

A MSS Secure Deployment Checklist

• Secure Deployment Checklist