The Java EE 5 Tutorial (PDF) - Oracle Software Downloads

FIGURE 28–6 Mapping Roles to Users and Groups
Create users
and/or groups
User 1
User 2 User 3
Group 1
User 1
User 2 User 3
The following sections provide more information on realms, users, groups, and roles.
What Is a Realm?
Define roles
in application
Application
Role 1
Role 2
Working with Realms, Users, Groups, and Roles
Application
Role 1
Role 2
Map roles to users
and/or groups
User 1
User 2 User 3
Group 1
For a web application, a realm is a complete database of users and groups that identify valid users
of a web application (or a set of web applications) and are controlled by the same authentication
policy.
The Java EE server authentication service can govern users in multiple realms. In this release of
the Application Server, the file, admin-realm, and certificate realms come preconfigured
for the Application Server.
In the file realm, the server stores user credentials locally in a file named keyfile. You can use
the Admin Console to manage users in the file realm.
When using the file realm, the server authentication service verifies user identity by checking
the file realm. This realm is used for the authentication of all clients except for web browser
clients that use the HTTPS protocol and certificates.
In the certificate realm, the server stores user credentials in a certificate database. When
using the certificate realm, the server uses certificates with the HTTPS protocol to
User 1
User 2 User 3
Chapter 28 • Introduction to Security in the Java EE Platform 777