 | Kerberos Single Sign-on – Through the use of the Windows Integrated Authentication, Quest Single Sign-on for Java (formerly Vintela Single Sign-on for Java) provides strong Kerberos-based single sign-on authentication between users and applications. | | Authorization Using Active Directory Groups – supports the authorization of users through controlled access gained by managing Active Directory group memberships. |
| Federation Support – Enables single sign-on access to Java services for users defined in other domains through Microsoft’s ADFS technology. | | Scalability – Supports both cross-realm and cross-forest trusts with Windows 2003, allowing it to scale from the department to the enterprise. |
| Platform Support – Provides maximum functionality specifically designed for running web services on the most popular application servers, operating systems, and platforms. | | Java Kerberos Library - Provides the functionality necessary to deliver single sign-on for Active Directory adn other Kerberos environments and supports Java/Microsoft interoperability. |
| Effortless Enterprise Integration – References standard network settings to configure itself automatically, picking up any changes as and when they occur. This capability also delivers automatic load-balancing and high-availability. | | Platform-independent – Provides single sign-on functionality for any Java environment running on any OS. |
| Support for Microsoft’s "Services for User" Kerberos Extensions – Provides better Microsoft / Java integration by supporting the Microsoft S4U2Self (protocol transition) and S4U2Proxy (constrained delegation) Kerberos extensions. | | Single Sign-on Flexibility – Provides Java application developers with maximum flexibility in the way the product is used to provide single sign-on including: - HTTP
- Web service calls
- Database connections (JDBC)
- Java EJB calls (on WebLogic)
|