SEC-35: SiteMinder Integration about spring-security

[spring-projects-issues]

Scott McCrory said:

Committed first draft to CVS for Ben’s review.

[spring-projects-issues]

Scott McCrory said:

In CVS there is now net.sf.acegisecurity.ui.webapp.SiteminderAuthenticationProcessingFilter (with a corresponding test class net.sf.acegisecurity.ui.webapp.SiteminderAuthenticationProcessingFilterTests).

This will let you use Siteminder as an authentication entry point by stripping off a unique user ID (and optional password) from the HTTP header (where Siteminder places its info after the user authenticates through it). It optionally will fall back to form input in cases where you don’t have Siteminder installed on development stations, etc. I put this code into production in a very large financial organization 9/28, so it’s getting “combat experience” as we speak.

I don’t have any formal documentation ready, but it should be somewhat straightforward (the class itself is very small). Please have a look and let me know if you have any questions – I’m very interested in getting feedback.

[spring-projects-issues]

Ben Alex said:

Scott, how are we going with this? Can this issue be closed?

[spring-projects-issues]

Scott McCrory said:

SiteminderAuthenticationProcessingFilter is working great in production, with no issues thus far, so the capability is ready to be closed for Acegi release. I should put some docs together for it though. Would you recommend that a section in the user’s manual be added? If so, what file(s) should I edit and where in the doc does this best fit? Thanks, Scott.

[spring-projects-issues]

Ben Alex said:

Scott, yes, please add a description of SiteMinder generally as well as how the Acegi Security implementation works to /doc/docbook/acegi.xml. I usually use XMLMind editor (free download), but any DocBook editor will do.

[spring-projects-issues]

Scott McCrory said:

About 30% done with the documentation now and will be finished by 11/1. I’ve slotted it just afterJAAS Authentication.

[spring-projects-issues]

Scott McCrory said:

Done! Feel free to close.