STARS2 uses an authentication filter servlet, as illustrated in . The servlet intercepts all requests made to the application and determines if they are authenticated. The servlet checks the session for a valid user. The session can indicate a valid user in one of several ways: The user has authenticated to STARS2 previously. The user comes in through the EPA portal and STARS2 is running on the same J2EE instance as the portal. If STARS2 and the portal are running on different J2EE instances, then a session ID will be present on the URL. The authentication servlet uses the ID to acquire a valid session from the EPA portal’s EJB service. Figure 17: Internal user authentication scheme Once authenticated, the user is presented the STARS2 Home page and offered the navigation paths described in Section 15.1.2. The valid EPA portal user IDs are mapped in STARS2’s database, enabling the application to utilize system roles (associated with internal users) for role-based security purposes (see Section ).
STARS2 uses an authentication filter servlet, as illustrated in . The servlet intercepts all requests made to the application and determines if they are authenticated. The servlet checks the session for a valid user. The session can indicate a valid user in one of several ways: The user has authenticated to STARS2 previously. The user comes in through the EPA portal and STARS2 is running on the same J2EE instance as the portal. If STARS2 and the portal are running on different J2EE instances, then a session ID will be present on the URL. The authentication servlet uses the ID to acquire a valid session from the EPA portal’s EJB service. Figure 17: Internal user authentication scheme Once authenticated, the user is presented the STARS2 Home page and offered the navigation paths described in Section 15.1.2. The valid EPA portal user IDs are mapped in STARS2’s database, enabling the application to utilize system roles (associated with internal users) for role-based security purposes (see Section ).
System%20Doc%20v2.0-baselined%202008-0715.docx