[CONF] Apache Syncope > [DISCUSS] Apache Shiro integration for authentication and authorization

[Colm O hEigeartaigh (Confluence)]

Title: Message Title

Colm O hEigeartaigh commented on a page

Re: [DISCUSS] Apache Shiro integration for authentication and authorization I don't know if Spring Security's Session management is done internally or whether it delegates to the underlying J2EE container. If the latter then wouldn't this suffice, as we could rely on container clustering etc.?   Reply • Like

In reply to Francesco Chicchiricco I believe we need - for Syncope 2.1 at earliest, anyway - to introduce a proper session store abstraction which will allow to select among different implementations - from simpler (in-memory) to more advanced (LDAP, RDBMS, ...) which can be empowered in HA scenarios. Does Fediz provide something similar? AFAIU Spring Security's session management does not provide such feature, while Spring Session does.

Stop watching space • Manage notifications This message was sent by Atlassian Confluence 5.8.4