The minimum requirement to authenticate a user is a user account system, a user account in that system identified by a user ID (or user name), and a shared secret (typically a password or passphrase) that only the user account system and the owner of the account know. The authentication system accesses the user account system and asks it to verify that the user's account exists, that the account is usable, and that the secret entered by the user matches the secret known to the user account. Only if the user account system successfully validates the users account does the authentication system establish the user identity for an application. Otherwise, the application fails to run on behalf of the specified user.
In OpenEdge, the authentication of user identities is supported through configurable user authentication systems. These authentication systems include the OpenEdge RDBMS, which can maintain its own set of valid user accounts, and support for other user account systems that OpenEdge or an OpenEdge application can use to authenticate user identities. These authentication systems also support a mechanism to assert a previously authenticated user identity as the current application or database connection identity. For more information on OpenEdge support for authentication, see
Security in OpenEdge and
OpenEdge Getting Started: Identity Management.