Can some one tell me what is certificate based authentication and how it can be implemented as a service ? Iam trying to build a authentication service.
Regards, Ram
Ulf Dittmer
Marshal
Joined: Mar 22, 2005
Posts: 35222
7
posted
0
It means that a WS client does not send a username and password, but instead a cryptographic digital certificate to the server (e.g., an X-509 certificate). The WS-Security standard defines how this works for WS.
What would this authentication service do? If a certificate gets sent, all the WS (or rather, its WS-Security implementation layer) needs to do is check whether that user is authorized to access the service.
Where can i get more details regarding this ? ie the WS Security standards, a sample of how a cryptographic digital certificate and how to authenticate the user using the certificate ?
Thanks a lot
Ram
I agree. Here's the link: http://ej-technologies/jprofiler - if it wasn't for jprofiler, we would need to
run our stuff on 16 servers instead of 3.
0
