LTPA overview

Lightweight Third-Party Authentication (LTPA) is an IBM proprietary security protocol which provides authentication technology used in WebSphere and Lotus Domino products. When accessing web servers that use LTPA, it is possible for a web user to re-use their login across different physical servers. It is important to note that LTPA uses tokens, which are issued to support single sign-on (SSO) in the application server product across multiple application server domains (cells). SSO is a mechanism that establishes trust across two or more applications located on different OS hosts using forwarded credentials. When a user authenticates against one enterprise application, the user is guaranteed access to another application running on a different WAS instance without having to re-authenticate, as long as the applications they are using share the same LTPA keys and their realm is also the same. An example could be a Lotus Domino server or an IBM WebSphere Application Server that...