Integrated Authentication

Integrated authentication is performed through the implementation of the interface IHttpAuthenticator which is configured in the lumisportalconfig.xml:

<security> <!-- Uncomment to configure a HTTP authenticator. See LumisXP documentation for details about included authenticators. <httpAuthenticator className="lumis.portal.authentication.http.SpnegoAuthenticator" ></httpAuthenticator> --> <!-- Uncomment to configure Kerberos Authentication Protocol. See LumisXP documentation for details. <kerberos> <configurationFile>security/krb5.conf</configurationFile> </kerberos> --> </security>

In LumisXP, an integrated authentication implementation is included using SPNEGO/Kerberos. However, it is also possible to customize the integrated authentication by creating your own implementation of the interface IHttpAuthenticator and modifying the configuration above to use it.

Integrated authentication is only triggered when access to a page is denied. Therefore, integrated authentication does not occur for pages with access permission for the user Guest.