Lưu trữ thông tin người sử dụng Challenge Làm thế nào thông tin về người dùng sẽ được lưu trữ và truy? Các ứng dụng có thể truy vấn của người dùng đối với một số thông tin và tìm kiếm các thông tin khác. Điều này có thể âm thanh như một vấn đề lớn, nhưng xem xét số lượng các ứng dụng khác nhau trong một tổ chức, và mỗi thể cần phải lưu trữ và lấy thông tin đó được cụ thể cho các chức năng của nó. | 228 CHAPTER 9 CLAIMS-BASED AUTHENTICATION across the enterprise so that you can accommodate the needs of all the applications. The solution to this can become very complicated. You need to satisfy two key requirements How users will gain access to the enterprise s applications regardless of their location. How different types of user information will be retrieved by the applications so that the applications can accomplish their required functions. User Access Challenge Will the application be accessed by employees from within the organization from outside the organization from the public Internet One technology may not be enough and the organization may have to support multiple technologies. For example you could use Windows Integrated security for internal users and Forms-Based Authentication FBA for users outside the organization but we all know the complexity this introduces in terms of providing a single authentication mechanism and the need for storing different user information in multiple locations. In addition neither Windows Integrated security nor FBA provide much information about the user with the latter providing username and password information only. And what about providing access to partner or vendor employees For that you need to implement identity federation so that the users won t need a separate login. Finally keep in mind that the application requiring login may exist in the cloud as this scenario is rapidly gaining popularity or you could have a hybrid scenario with applications both on the premises and in the cloud. User Information Storage Challenge How will information about users be stored and retrieved The application can query the user for some information and look up other information. This may not sound like a big issue but consider the number of different applications in an organization and that each may need to store and retrieve information that is specific to its functionality. Even when your organization requires simple identity
