How Crystal Enterprise authenticates and authorizes

Authentication is the process of verifying the identity of a user who attempts to access the system, and authorization is the process of verifying that the user has been granted sufficient rights to perform the requested action upon the specified object. This section describes the authentication and authorization processes in order to provide a general idea of how system security works within Crystal Enterprise. Each of the components and key terms is discussed in greater detail later in this section.

Because Crystal Enterprise is fully customizable, the authentication and authorization processes may vary from system to system. This section uses ePortfolio as a model and describes its default behavior. If you are developing your own Crystal Enterprise end-user or administrative applications using the Crystal Enterprise Software Development Kit (SDK), you can customize the system's behavior to meet your needs. For complete details, see the Crystal Enterprise Web Developer's Guide.

Click the appropriate link to jump to that section:

For procedures that show how to set up the different authentication types, see Available authentication types.



Crystal Decisions, Inc.
http://www.crystaldecisions.com
Support services:
http://support.crystaldecisions.com