Implementing Domain-wide Authenticator for Secure Web-based Applications Logon Procedure

摘要

The basic need for security implementations are mainly to establish and maintain users trust of the system by providing assurance for confidentiality, integrity and availability. There are three different types of credentials and an authenticator should implement a validation mechanism of using at least two of them. By using a different authentication mechanism of not basing on domain user identification and password an increase in security for both system and applications is made possible. Secure sessions management protect authenticated users and accessible resources from being compromised.