Authentication for 2 apps on same Livelink Instance

[k4cics]

Hi All,
We are relatively new users and have a question of design that we are grappling with at the moment. We have 2 instances of Livelink to host two applications to two different user groups. One of the apps AP1 uses a subset of the documents in the other one AP2. AP1 currently does not require a token but AP2 does when access is via the Internet.

We want to reduce double loading effort of these docs and are testing a solution that places the two apps onto one instance.

During testing, we found a security issue in that when we combined onto one stances, AP2 users are be able to get to AP2 but calling the URL of AP1 and thus bypassing the token authentication.

Is there an elegant solution to this issue using existing functionality of Livelink or would this require a special development?

Regards,
Rod

 

[ggriffit]

Rod,
given that each setup has a different purpose, you may encounter future issues where one AP needs to be upgraded to a new module version / release of Livelink etc which would mean that you would need to upgrade the other one too - which may be problematic and a much bigger job than it needs to be.

If you know which documents / folders etc you want to move and create an Agent to synch them to the other server. If you want something faster you could add a link from one server to the other and then the user could then login to the other server.

Can you be clearer on your requirements and what you mean by "token" ?

Greg Griffiths
Livelink Certified Developer & ECM Global Star Champion 2005 & 2006

http://www.greggriffiths.org/livelink/

 

[k4cics]

Hi Greg,
Our applications are bascially user interfaces to assist them to locate documents by themes supported by a underlying folder structure by organizational units. The only difference is that one application AP1 is accessed by external users and the documents are classified as 'public' and the other application AP2 is accessed by internal staff and contains public and more restricted documents.

By token, I mean the RSA SecureID hardware that provides 2-factor authentication.

Thanks for your time in responding.

Rod

 

[ggriffit]

Can you just not change the permissions on the AP2 server so that only certain users can log in to AP2 ? if not a simple customisation on AP2 can validate the token and ensure that the user has the token.

Greg Griffiths
Livelink Certified Developer & ECM Global Star Champion 2005 & 2006

http://www.greggriffiths.org/livelink/