Sun Java System Application Server Enterprise Edition 8.1 2005Q2 Administration Guide

- Previous: Authorizing Users
- Next: Auditing Authentication and Authorization Decisions

### Specifying JACC Providers

JACC (Java Authorization Contract for Containers) is part of the J2EE 1.4 specification that defines an interface for pluggable authorization providers. This enables the administrator to set up third-party plug-in modules to perform authorization.

By default, the Application Server provides a simple, file-based authorization engine that complies with the JACC specification. It is also possible to specify additional third-party JACC providers.

JACC providers use the Java Authentication and Authorization Service (JAAS) APIs. JAAS enables services to authenticate and enforce access controls upon users. It implements a Java technology version of the standard Pluggable Authentication Module (PAM) framework.

- Previous: Authorizing Users
- Next: Auditing Authentication and Authorization Decisions

- © 2010, Oracle Corporation and/or its affiliates