• Web Security Token Store Implementation

    By Grant Forrest 1 decade ago

    I am interested in using the ext lib for social integration within an XPage.

    My query is,

    is the web security store database needed on each local notes client, and has there been any success stories when releasing to the full organisation?

    How secure is this database as we are storing the users password locally on the machine?

    Can we replace the security database with SSO, between the notes client and the XPage (viewed within the notes client)? 

    We have over 60000 notes users in our organisation throughout the world. Is there any other solutions for interacting with Connections primarily in an XPage, without needing to store basic authentication details. (ignoring any OAuth requirements)?

    Any help greatly appreciated!

    Grant

    • Server side

      By Per Henrik Lausten 1 decade ago

      Grant, the web security store is a server side deployment that only the backend XPages logic can access. Read more about it here:
      http://www.openntf.org/blogs/openntf.nsf/d6plinks/NHEF-8TY9EV

      The web security store encrypts the stored passwords for e.g. Connections in the server side database.

      You can find more documentation at the Social Enabler projects site: http://socialenabler.openntf.org/.

      The user still need to access the XPages solution using a password - and this can be handled by using the XPages solution in the Notes client (and thereby achieve SSO between the Notes client and the XPages solution).

      I hope this clarifies it somewhat.

    • Check this out

      By Niklas Heidloff 1 decade ago