<div>
Is there still something unclear?
</div>


<div>
<div class="content wysiwyg-content">
We are using Weblogic Application server 8.1.<br />
There is a session bean (sb1) sending a JMS message that is processed by an MDB which in turn calls another session bean (sb2). In this situation can the mdb or sb2 leverage the JAAS authentication already done before calling sb1. If not can the mdb leverage the custom authentication provider to ease the pain of doing the authentication again and set the authenticated user roles that sb2 can leverage. (the session bean sb2 methods require authorization)<br />
<br />

</div>
</div>


We are using Weblogic Application server 8.1.
There is a session bean (sb1) sending a JMS message that is processed by an MDB which in turn calls another session bean (sb2). In this situation can the mdb or sb2 leverage the JAAS authentication already done before calling sb1. If not can the mdb leverage the custom authentication provider to ease the pain of doing the authentication again and set the authenticated user roles that sb2 can leverage. (the session bean sb2 methods require authorization)



JAAS Authentication in MDB

Java Enterprise Edition (Java EE) is a specification defining a collection of Java-based server and client technologies and how they interoperate. Java EE specifies server and client architectures and uses profiles to define technology sets targeted at specific classes of applications. All Java EE profiles share a set of common features, such as naming and resource injection, packaging rules and security requirements.

Java EE

Java is a platform-independent, object-oriented programming language and run-time environment, designed to have as few implementation dependencies as possible such that developers can write one set of code across all platforms using libraries. Most devices will not run Java natively, and require a run-time component to be installed in order to execute a Java program.