What is the difference between JAAS, SAML and Realm

Question

I tried to find out JAAS, then I came up with the terms SAMLand Realm, and now I'm confused.

In any of the basic guides, JAASwe pretty much set up a basic one that has the usual configuration Realm. If I read the configuration SAML, then it will look the same as JAAS. I have no idea why the different names. Maybe SAML is built on Realm and JAAS on SAML , I’m not sure that any body, please, clearly distinguish the difference,

Please, humble request, if you share any link, define it a bit so that it helps me when I read them.

I have successfully configured JAAS BASIC and FROM authentication on both JBOSS and Glassfish. This helped me protect my JSPand Servelets(web project). where to see if I want to protect EJB as part of my application.

Answer 1

JAAS API- Java SE EE, . JAAS LoginModules. LoginModule (javax.security.auth.spi.LoginModule) , CallbackHandler. -. JAAS Subject ( ) Principal ( - , ). JAAS .

- Java (, FORM, BASIC DIGEST, web.xml) JAAS.

Realm - , /. . A, LDAP, B , , . , , - Tomcat, . (, ) Realms.

Java EE EJB (RBAC). , , , , , . (= , @RolesAllowed, @PermitAll, @DeclareRoles XML) (= , , isCallerInRole on EJBContext ). http://docs.oracle.com/javaee/6/tutorial/doc/bnbyl.html

SAML - . SAML WebSSO . , SAML , XML, , . SAML , - ( Identity Provider - ). SAML OpenID OAuth 2.0, , Facebook Google .

, ,

Answer 2

, . - , . JAAS SAML - , . SAML - . http://en.wikipedia.org/wiki/Security_Assertion_Markup_Language

Answer 3

, , :

SAML JAAS . SAML - XML- . SAML XML- , / Web- .

JAAS, , , , , , .

, , JAAS , , SAML. , SAML /; XML-, JAAS- .