JasperSoft For Business users

Technology Highlight: Acegi Security

Built-in and Extensible Security.

JasperServer uses the Spring sub-project, Acegi Security, for authentication and authorization. By default, user names and passwords are stored in the JasperSoft metadata repository and use form-based authentication. With the Acegi Security framework, you can instead plug into your existing security services without changing your environment or requiring extensive development effort.

Acegi supports all these technologies*:

Authentication Mechanism	Notes
HTTP BASIC authentication headers	An IEFT RFC-based standard
HTTP Digest authentication headers	An IEFT RFC-based standard
HTTP X.509 client certificate exchange	An IEFT RFC-based standard
LDAP	A very common approach to cross-platform authentication needs, especially in large environments
Form-based authentication	For simple user interface needs
Computer Associates Siteminder
JA-SIG Central Authentication Service	Otherwise known as CAS, which is a popular open source single sign on system
Transparent authentication context propagation for Remote Method Invocation (RMI) and HttpInvoker	HttpInvoker is a Spring remoting protocol
Automatic "remember-me" authentication	Allows you to tick a box to avoid re-authentication for a predetermined period of time
Anonymous authentication	Allows every call to automatically assume a particular security identity
Run-as authentication	Useful if one call should proceed with a different security identity
Java Authentication and Authorization Service (JAAS)
Container integration with JBoss, Jetty, Resin and Tomcat	So you can still use Container Manager Authentication if desired
Your own authentication systems	For legacy and other systems that don't follow any particular security standards. In this case, Acegi Security is an open platform and it is quite simple to write your own authentication mechanism

* Source: Acegi Security Reference Documentation v.1.0.4

"As more and more organizations realize the benefits of giving BI capabilities to a broader base of users, many are turning to open source products. JasperSoft's open source BI suite offers a full range of business intelligence capabilities." - Claudia Imhoff, President of Intelligent Solutions

Authentication Mechanism

Notes