Configuring authenticators and realms

Authenticators are defined within the realm that uses them.

Realms are defined in <realm> elements in the authenticationConfig.xml file. The <realms> element contains a separate <realm> subelement for each realm.

Modify realms by using the authentication configuration editor.

The <realm> element has the following attributes:

Table 1. The <realm> element attributes
Attribute Description
name Mandatory. The unique name by which the realm is referenced by the protected resources.
loginModule Mandatory. The name of the login module that is used by the realm.

The <realm> element has the following subelements:

Table 2. The <realm> element subelements
Element Description
<className> Mandatory. The class name of the authenticator.

For details of the supported authenticators, see the following topics.

<parameter> Optional. Represents the name-value pairs that are passed to the authenticator upon instantiation.

This element might be displayed multiple times.

<onLoginUrl> Optional. Defines the path to which the client is forwarded upon successful login.

If this element is not specified, then depending on the authenticator type, either the current request processing is continued, or a saved request is restored.