Authentication Plug-Ins (AuthStates)

This chapter describes how to integrate nevisIDM into nevisAuth by using authentication plug-ins.

info

To integrate nevisIDM into nevisAuth, the package nevisidmcl has to be installed on the nevisAuth machine.

Security Considerations

The secure deployment and use of authentication states is critical to the security of your system.

To protect the authentication flows from CSRF hijacking, we recommend to add a CSRFFilter in the nevisProxy for additional protection, follow "Configuring CSRF protection for authentication flows" for more details.