•  Preface
  • Purpose
  • Audience
  • Organization
  •  Using this manual
    • References to ABL compiler and run-time features
    • References to ABL data types
  • Typographical conventions
  •  OpenEdge messages
    • Obtaining more information about OpenEdge messages
  •  Examples of syntax descriptions
    • Long syntax descriptions split across lines
    • Complex syntax descriptions with both required and optional elements
•  What is Identity Management?
  • What is Identity?
  •  How OpenEdge supports user account systems
    •  Authentication and user account systems
      •  User accounts for OpenEdge-performed authentication
        • User credentials authenticated by OpenEdge
      • User accounts for ABL application-performed authentication
    • User credentials authenticated by OpenEdge
    • Specifying a user ID for OpenEdge authentication
    • Common authentication mechanism for database clients
  •  OpenEdge identity types and their applications
    • Authenticated user identity
    •  Default user identity (for backward compatibility)
      • ABL default identity constraints
      • SQL default identity constraints
      • Database utility default identity constraints
    • Authentication mechanisms for other OpenEdge components
  • User identity and multi-tenancy
•  How is OpenEdge Identity Managed?
  •  OpenEdge authentication
    •  Authentication operations
      • OpenEdge security systems and authentication
      • Authentication operations supported for OpenEdge security systems
    •  User authentication process
      • Process for a user authentication operation
    •  Single sign-on (SSO) process
      • Process for an SSO operation
      • Process for a successful SSO to an ABL session
      • Process for a successful SSO to an OpenEdge database connection
  •  OpenEdge authorization
    •  Tenant authorization
      • Tenancy data models
      • Managing tenancy access across multiple ABL sessions
    • Role-based authorization
•  Configuring and Implementing Authentication in OpenEdge
  •  Defining and configuring security domains
    • Requirements to configure a domain
    • Defining the name of a domain
    •  Defining and specifying the system type
      • OpenEdge support for user authentication and SSO
      • Specifying the system type
    • Entering a domain access code
    • Enabling and disabling domains
    • Entering system options
    • Identifying the tenant to which a domain belongs
    • Pre-configured and reserved OpenEdge domains
    • Configuring authentication-enabled domains
  • Configuring authentication
  • Run-time domain configuration
  • Entering user credentials in OpenEdge
  •  Authentication in ABL applications
    • Initializing a client-principal object for user authentication
    • Exporting and importing a client-principal object
    • OpenEdge-performed authentication and SSO
    • Application-performed user authentication
    • Managing identity for multi-tenancy
•  Configuring and Implementing Authorization in OpenEdge
  • OpenEdge authorization models
  • Non-multi-tenant vs. multi-tenant authorization
  • Tenant data access
  • When a user's domain is available for access control
  •  User ID patterns as ACLs and ABL permissions checking
    • Patterns affecting ABL permissions
• Access control
• Access control list (ACL)
• Access controls
• Access token
• Authentication
• Authentication system
• Authn
• Authorization
• Authorization system
• Authz
• Cipher
• Clear text
• Data integrity
• Data-integrity seal
• Data privacy
• Decrypt
• Digest
• Digital signature
• Disallow Blank UserId Connections
• Domain
• Domain registry
• Encrypt
• Encrypted data
• Encrypted private data
• Encryption
• Encryption algorithm
• Encryption key
• IV
• HMAC
• Identity
• Login
• Login credentials
• Login session
• Logout
• MD5
• Message digest
• Obfuscation
• OpenEdge domain
• OpenEdge security domain
• OpenEdge security token
• PAM
• Plug-in Authentication Module
• Registry
• Seal
• Security domain
• Security system
• Security token
• SHA-1
• Signature
• Single sign-on (SSO)
• Trust relationship
• Trust Application Domain Registry
• User account
• User account system
• User authentication
• User authorization
• User credentials
• User identity
• User login
• User login session