Pageviews

Monday, January 13, 2014

ADF Security Framework - Create Login/Logout using ADF security framework

ADF Security Framework - Create Login/Logout using ADF security framework



Step 1: Right click on ADF application, select Secure -> Configure ADF Security





Step 2: Select the ADF security model based on your application need. For this example, I have selected ADF Authentication and Authorization option.




Step 3: Next step is to choose the authentication type. I have selected the Form-Based Authentication for this example. Please make sure to select the checkbox to enable the ADF framework to generate default pages for login and error page.




Step 4:  Select No Automatic Grants option in order to secure the application. By doing so, all the pages within our application will be inaccessible until we explicitly grant access to them.




Step 5: Enable redirect checkbox option, and select the page that you want the login page to redirect  after a successful authentication.




Step 6: The summary section lists all the files that will be created/modified when you click the finish button. The details are as follows..

adf-config.xml - This file defines the JAAS(Java Authentication and Authorization Service) security context. This enables the use of ADF authentication servlet and Authorization checking.

web.xml - Sets the authentication type for your web project.

weblogic.xml - Maps security role to the OPSS principal users.

jazn-data.xml - Sets user and role credentials

jps-config.xml - Defines OPSS context and references jazn-data.xml as service provider.




Step 7: Add application roles. This updates jazn-data.xml file. Check out the below screenshot for details.




Step 8:  Add application users. This updates jazn-data.xml file. Check out the below screenshot for details.



Step 9: In resource grants, select Web Page resource type, then select the resource, and grant access to the newly created role. By giving access to the role, the users associated to the role gets the access to view the selected resource.



Step 10: Run the application, and check out the secure authentication and authorization functionality provided by ADF security framework.

ADF security framework Logout:




Check out the video below for the demo.






Click download to get the source code.