Tag: security
-
User-less Login to PLM 360
Let’s say you have a service that synchronizes data to PLM 360 in the background. It’s a headless system, so there is no UI. The problem is that PLM uses 3-legged OAuth 1.0, and “human” is one of the 3 legs. There are lots of blockers to prevent a non-human from authenticating. For example, there…
-
Entities and Behaviors
There are 2 concepts in the Vault API: Entities and Behaviors. The two concepts are intertwined; you can’t describe one without describing the other. An Entity is an object that can have behaviors on it. A Behavior is a feature that can be applied to entities.
-
Security – Folder ACLs and System ACLs
If you haven't read my earlier article on security, you might want to do that first. This article is going to dig deeper into Vault's the security framework. That's right, there's even more. The good news is that the hard stuff is over. Now that you know what an ACL is an how it's used…
-
Windows Authentication
Do not send Windows usernames and passwords to Vault!!! Yes, I know the login dialog makes it look like this information is going to Vault, but that’s not how it works at the API level. What is really going on is that the Win Auth Service is used to sign in to Vault instead of…

You must be logged in to post a comment.