Security Layers
- Hardware and media
- Network
- Operating System
- Applications
Authentication Support
- HTTP Basic, digest, x509 and form based
- LDAP and Active Directory
- OpenID, Jasig CAS (Central Authentication Service), and JAAS
- Kerberos and SAML
Authorization Support
- Web request
- Method invocation
- Domain Object instance access control (very high security, used in Financial and Healthcare)