Stacking Providers and Combining Authentication Results

(Not applicable to Online Data Proxy) Implement multiple LoginModule to provide a security solution that meets complex security requirements.

Each provider has a controlFlag attribute that controls overall behavior when you enable multiple providers. Set the controlFlag to refine how results are processed.

  1. Use Sybase Control Center to create a security configuration and add multiple providers as required for authentication.
  2. Order multiple providers by selecting a LoginModule and using the up or down arrows at to place the provider correctly in the list.
    The order of the list determines the order in which authentication results are evaluated.
  3. For each provider:
    1. Select the provider name.
    2. Click Properties.
    3. Configure the controlFlag property with one of the available values: required, requisite, sufficient, optional.
      See controlFlag Attribute Values for descriptions of each available value.
    4. Configure any other common security properties as required.
  4. Click Save.
  5. Select the General tab, and click Apply.
For example, say you have sorted these login modules in this order and used these controlFlag values:
The results are processed as indicated in this table:
Provider Authentication Status
LDAP pass pass pass pass fail fail fail fail
NT Login pass fail fail fail pass fail fail fail
SSO Token * pass pass fail * pass pass fail
Certificate * pass fail * * pass fail *
Overall result pass pass pass fail fail fail fail fail
Parent topic: Enabling Authentication and RBAC for User Logins
Related concepts
LDAP Security Provider
Related reference
LDAP Configuration Properties