User Authentication
The schema below explains how the Mashup UI authenticates users.
How Search Users Access Documents | |||||
|
| ||||
Search with Early Binding
The schema below shows the mechanism that guarantees that any search user accesses only the documents they are allowed to, because documents are indexed with their ACLs.
Document and Security Tokens
The schema below explains how user security tokens help to filter documents that the user cannot view/read. Exalead CloudView handles positive and negative ACLs.
Using Several Security Sources
You can map several identification management systems to Exalead CloudView.
-
User authentication uses a primary source.
-
Access rights for each source are combined to allow secure search on multiple systems.
Late Binding Vs Early Binding
Security policies can be managed with more flexibility and early binding mechanism is not implemented.
As an alternative to early binding, you can use the late binding mechanism that checks document security tokens on the fly at search-time.
Note:
Using late binding may significantly impact performance.
The schema below shows the differences between early and late binding mechanisms.
