Release 10.1A: OpenEdge Getting Started:
Core Business Services

Identity Management

A key component of any successful security policy is the management of identity. The way you approach user identity management determines who can access your application, database, or other resources; what the user can do once access has been given; and even how you will audit the activities that the user performs. In some cases, a user may be an individual; in other cases, a user may be an application or utility of some kind. Either way, controlling unapproved access to data is essential.

OpenEdge provides you with a number of different options regarding how you manage user identities through its authentication, authorization, and user ID assertion services, and how you record user identity for auditing purposes. This chapter provides information about those options and their implementation, as described in the following sections:

Managing user identity
Trusted authentication systems and domains
The client-principal object
Asserting user IDs individually or in synchronization
Additional OpenEdge identity management options