How to combine several authorization modules

Quite often one wants to combine several different authorization modules. For example we often have infoglue´s own database and combine it with one or several LDAP/JNDI modules. The benefit is that you can have as many sources as you like and InfoGlue will combine the results. An example is when a customer wants all external users in one database/LDAP or similar and the internal users should be fetched from one or more internal sources.

To make this work we have created a GenericCombinedAuthorizationModule. It doesn’t do much more than orchestrating the modules involved. The way to set up authorization to make this work is this:

In application settings:

* Set “Authenticator class” to org.infoglue.cms.security.GenericCombinedAuthorizationModule
* Add the following first in the “Extra security parameters” field.

 



comments powered by Disqus