Authentication and Authorization in Search Engine

The following diagram illustrates the elements involved with authorization and authentication and the interaction between them.

This example illustrates how PeopleSoft and search engine interact to authenticate users and authorize user access to search results.

Step	Description
1	During the index build, the crawler collects the defined security attributes and access restriction options associated with search definitions. The crawler applies those security attributes to the data sources (indexes).
2	An application end user runs a search query.
3	The search engine security framework using the orcl-security-plugin invokes the PeopleSoft security service for user authentication.
4	Based on the authenticated user, the search engine performs either a source-level or a document-level authorization using the orcl-security-plugin. For document level authorization PeopleSoft invokes the Application class defined for the Data Source. This would fetch a list of values for the security attribute which then the search engine would use for filtering the search results.