Grouper Developers Forum

["Tom Scavo" <>]

On Jan 8, 2008 11:33 AM, Sanjay Vivek 
<>
 wrote:
>
> We are currently working on Web Services authentication using Apache
> Rampart. One of the things we're looking at is identifying the user once
> he has logged in and using his credentials to figure out whether he is
> authorised to add user to a group (as an example).

I don't understand.  Perhaps you can explain this a bit more in your
planned followup?

> WS authentication was slightly easier with Axis1 because Axis1 could
> easily be set up for HTTP authentication (since Axis is implemented as a
> servlet in a web app). However, things are different with Axis2.
> WS-Security is the preferred method of authentication for Axis2. Rampart
> wraps the WSS4J functionality (the library that implements WS-Security),
> and can be integrated into Axis with little effort.

What security token formats does Axis2/Rampart support?

> A detailed reference to authenticating Grouper WS with Rampart will be
> posted soon.

We look forward to that!

Thanks,
Tom