Assurance

[Mark John Rank <>]

Assurance Folks:

I am seeking a bit of advice. UWM has run into some delays with our 
Bronze/Silver
efforts but we are still working in that direction. One area we have gotten 
to is
implementing procedures to limit direct access to credential stores from 
external entities. 

Recently our IAM Group has been asked to provide authentication access for a 
“Fat Client” with a remotely hosted 2-tier application server via secured 
LDAP. We are putting together a quick impact document as part of the response.
I would welcome feedback from the group, either on the analysis approach or 
if 
folks have solved this problem already. The document is available at ... 

https://pantherfile.uwm.edu/rankm/public/external_party_issue.pdf

For reasons that can be chalked up to "that ship has sailed", other AuthN
protocols are not an option at this time.

Any feedback would be appreciated.

Regards,
Mark

------------------------------------------
Mark Rank 
Middleware and Identity Management Group
University Information Technology Services 
UW-Milwaukee                       
Email: 

            
Phn:  414-229-3706     
------------------------------------------