3.6 AUTHENTICATION, AUTHORIZATION, AND ACCESS CONTROL REQUIREMENTS Is there a single sign-on requirement? Not all the products used to manage the network use the same authentication, authorization, and access control mechanisms. Authentication is the mechanism that is used to determine that a user is who he claims to be. Authorization comes after a person is authenticated and determines what access rights are permitted for the individual, which could be no access or full access. Access control controls the specific access to the resources.Authentication is done in a variety of ways, but for network and systems management systems a login and password are the standard method. Many products can use the same authentication method, and most have individual authorization and access control mechanisms. NNM requires only the operating system login to run the ovw command. OVO requires the operating system login and a second login after the execution of the opc command. Authorization to execute NNM's ipmap can be given through the OVO application bank to unite the authentication methods of OVO and NNM. Using a product's web-based interface may provide the best ability to unite authentication, authorization, and access control. |