Package com.ibm.portal.auth.stepup

This package defines the IBM SPI for the step up authentication function.

See:
Description

Interface Summary

AuthLevelConfig	Provides a view to the Config settings of an AuthLevelVerifier
AuthLevelVerifier	This is the plug point for plugin a custom authentication level verifier.
StepUpAuthHandler	This is the plug-point for custom step up handler implementations.

Package com.ibm.portal.auth.stepup Description

This package defines the IBM SPI for the step up authentication function. This function allows you to create own authentication level with can be challenged on Portlet and Page level.
You can enrich WebSphere Portal by plugging an own Authentication Level by implemening at least an own AuthLevelVerifier to verify the availability of your new Level.
If you do want to have an own challenge for this Level too then you need to provide an implementation of StepUpAuthHandler as well.
, if not you can delegate the challenge to the next configured Level by using com.ibm.wps.auth.sua.impl.StepUpAuthHandlerDelegation in the configuration of you Level



Your own Authentication Level can be registered at the StepUpAuthentication Service by changing/providing the following properties
sua.authLevel.enable=yourauthlevelname,authenticated....

sua.authLevel..strength=yourstrength
Defines the relationship in regards to the other configurated levels. A higher strenght does define a higher trust
sua.authLevel..authLevelVerifier=Name of your AuthLevelVerifier implemetation
Defines the class which should be used to verify your authentication level
sua.authLevel..stepUpAuthHandler=Name of your StepUpAuthHandler implemetation
Defines the class which should be used to enforce your authentication level. you can use com.ibm.wps.sua.impl.StepUpAuthHandlerDelegation if you want to delegate the enforcement to the next level