CyberSafe - TrustBroker WebAccess AS Option

Products • TrustBroker™

If you have Web applications that require user authentication and would like to use the same credentials that are used for other applications on the workstation and/or the credentials obtained during workstation logon, then the TrustBroker™ WebAccess product may be the product you require. This TrustBroker™ WebAccess Application Server Option is an add-on product that allows J2EE applications to recognise the same user identity obtained at the workstation.

Overview

Components

The TrustBroker™ WebAccess product provides Kerberos authentication services between workstations running a Web browser and Web servers, or Web proxy servers accessible across the network. If used in conjunction with this WebAccess Application Server Option the authenticated identity of the user at the workstation can also be securely presented to JAVA servlets running on the Application Server.

The TrustBroker™ WebAccess Application Server Option is an optional add-on product for the TrustBroker™ WebAccess product. When using this product, the Web server or Web proxy server running the WebAccess product can be configured to forward the users identity to a Java servlet on the Application Server, providing the users’ identity (in the form of a Kerberos principal name) to the servlet. There are many uses for this add-on product, one such example is when the servlet is coded to decide whether to return the page requested back to the users’ Web browser or not, depending on the Kerberos identity of the user.

A single components is provided with WebAccess Application Server Option :

Application Server

Application Server

The 1.1 release of this product is available for use with IBM's WebSphere Application Server and has been implemented as a WebSphere Trust Association Interceptor.

Sample servlet code is provided to illustrate how to obtain the Kerberos principal name of the user at the workstation/browser.

WebSphere Application Server, Version 5.0 (or later) is currently supported on Microsoft® Windows 2000 or NT servers.

Downloads & Documentation

To download a data sheet that describes the WebAccess product click here (359kb)

You will need Adobe Acrobat Reader to view this file after download.

Future Plans & Making Contact

In future versions of this product we are considering providing support for additional operating systems and Application Server platforms, such as BEA's WebLogic and Oracle iAS. We would also like to add interfaces to popular Web access control products, such as Netegrity SiteMinder. We would like to develop new features into this product based on market needs, so if you don't see your exact requirements described please don't let this stop you from making contact with us.

Contact Us

If you have specific Web authentication requirements that you would like to discuss with us please provide us with your details by clicking here and we will be happy to discuss how WebAccess or WebAccess with the Application Server Option might be able to meet your requirements.