20.4.3.6 No Authentication (using DAD)
Adopts the current database user. This approach can be used in combination with a mod_plsql Database Access Descriptor (DAD) configuration that uses basic authentication to set the database session user.
- About DAD Credentials Verification
Learn about DAD Credentials Verification. - Setting Up DAD Credentials Verification
Learn how to set up DAD Credentials Verification.
Parent topic: Understanding Preconfigured Authentication Schemes
20.4.3.6.1 About DAD Credentials Verification
Learn about DAD Credentials Verification.
DAD credentials verification uses the Oracle database native authentication and user mechanisms to authenticate users using a basic authentication scheme. This authentication scheme gets the user name from the DAD either as the value stored in the DAD configuration or, if the account information is not stored in the DAD configuration, as the user name captured using the basic authentication challenge.
To use DAD credentials verification:
-
Each application user must have a user account in the Oracle database.
-
You must configure a PL/SQL DAD for basic authentication (without account information).
This results in one user name/password challenge for browser session for your application users. The user identity token is then made available in the
APP_USER
item.
DAD database authentication is useful when you must implement an authentication method that requires minimal setup for a manageable number of users. Ideally these users would have self-managed accounts in the database and your use of this authentication method would be short lived (for example, during the demonstration or prototyping stages of development).
The main drawback of this approach is burdensome account maintenance, especially if users do not administer their own passwords, or if their database accounts exist only to facilitate authentication to your application.
Parent topic: No Authentication (using DAD)
20.4.3.6.2 Setting Up DAD Credentials Verification
Learn how to set up DAD Credentials Verification.
To set up DAD Credentials Verification authentication:
Parent topic: No Authentication (using DAD)