Introduction

DDF provides a Security Framework that can be used to secure individual web services or other DDF components. The Security Framework is the set of APIs that allows each component to connect with the underlying security services such as Authentication, Authorization, or Auditing. DDF provides an optional reference implementation of these security services in the DDF Security Application. This document describes how DDF utilizes the Security Framework to protect data and services.

The DDF Security Framework page provides a complete description of how the security framework operates, while the DDF Security Application Users Guide provides a complete description of each of the services provided by the DDF Security Application.

How do I …?

The following table provides links in the documentation based on the type of security need to be addressed.

Security Need	Described in...
Enable SSL for the DDF console and web applications	Hardening
Harden the DDF server	Hardening
Install the DDF Security Application	DDF Security Application Users Guide, DDF Security Application Install/Uninstall
Manage certificates for DDF use	Certificate Management
Manage certificates inside a java keystore	Configuring a Java Keystore for Secure Communications
Use the security framework in my own component	Security Core API, Security Core API Javadocs, DDF Security Framework
Configure CAS server or client integration	CAS Security Application
Stand up an embedded or stand-alone LDAP server	LDAP Security Application
Implement WSS for web services	DDF Security Framework, PEP Security Application, PDP Security Application
Enforce authorization on web services	PEP Security Application, PDP Security Application
Encrypt passwords or other sensitive information	Security Encryption, Security Encryption Commands
Configure interaction with a Security Token Service (STS)	STS Security Application
Configure data redaction and filtering	Redaction and Filtering

Browser not supported