Skip navigation.
Downloads | Product Documentation | Support

Administration Console Online Help

# Weblogic Authentication Provider-->General

Tasks Related Topics Attributes

## Overview

Use this page to configure a WebLogic Authentication provider for a security realm.

Authentication is the process whereby the identity of users or system processes are proved or verified. Authentication also involves remembering, transporting, and making identity information available to various components of a system when that information is needed.

By default, the WebLogic Authentication provider is configured in the default security realm (`myrealm`). The WebLogic Authentication provider allows you to edit, list, and manage users, groups, and group membership. User and group information is stored in the embedded LDAP server.

The Control Flag attribute is the Java Authentication and Authorization Service (JAAS) control flag that determines how the LoginModule for the WebLogic Authentication provider is used in the login sequence

You can use a custom Authentication provider instead of the WebLogic Authentication provider. For a custom Authentication provider to be available in the WebLogic Server Administration Console, the MBean JAR file for the provider must be in the `WL_HOME\lib\mbeantypes` directory.

## Tasks

Configuring an Authentication Provider: Main Steps

Configuring the WebLogic Authentication Provider

## Related Topics

Introduction to WebLogic Security

Managing WebLogic Security

Securing WebLogic Resources

Programmimg WebLogic Security

Developing Security Providers for WebLogic Server

Securing a Production Environment

The Security topics in the WebLogic Server 8.1 Upgrade Guide

Security FAQ

The Security page in the WebLogic Server documentation

## Attributes

Table 172-1

Attribute Label | Description | Value Constraints
--- | --- | ---
Name | The name of this WebLogic Authentication provider. MBean: `weblogic.security. providers.authentication. DefaultAuthenticatorMBean` Attribute: `Name` |
Description | A short description of this WebLogic Authentication provider. MBean: `weblogic.security. providers.authentication. DefaultAuthenticatorMBean` Attribute: `Description` | Default: "WebLogic Authentication Provider"
Version | The version number of this WebLogic Authentication provider. MBean: `weblogic.security. providers.authentication. DefaultAuthenticatorMBean` Attribute: `Version` | Default: "1.0"
Control Flag | Determines how the login sequence uses the Authentication provider. A `REQUIRED` value specifies this LoginModule must succeed. Even if it fails, authentication proceeds down the list of LoginModules for the configured Authentication providers. A `REQUISITE` value specifies this LoginModule must succeed. If other Authentication providers are configured and this LoginModule succeeds, authentication proceeds down the list of LoginModules. Otherwise, control is return to the application. A `SUFFICIENT` value specifies this LoginModule need not succeed. If it does succeed, return control to the application. If it fails and other Authentication providers are configured, authentication proceeds down the LoginModule list. An `OPTIONAL` value specifies this LoginModule need not succeed. Whether it succeeds or fails, authentication proceeds down the LoginModule list. This setting is the default. MBean: `weblogic.security. providers.authentication. DefaultAuthenticatorMBean` Attribute: `ControlFlag` | Default: "REQUIRED"