---

The Web Application Manager - is a foundation on which to build web-based enterprise applications. Its focus is on security, providing a central point for the authentication of users and the authorization of user's access to entire web-based applications and specified subsets of an application's functionality.

Many web-based applications require the authentication of users, generally by the use of a user ID and matching password. Once authenticated, authorization to gain access to functionalities is required. Different users may have different permissions, giving access to some functionalities and not to other functionalities. If multiple applications are available, the authentication process is generally required by all the applications. WAM centralizes this authentication and authorization process, taking the burden away from the individual applications, and making maintenance of user information much more simple by placing it in one central location.

WAM allows an organization to house multiple web-based applications behind a single entry point into their systems. The entry point can be configured using WAM to enable custom home page portals with personalized look and feel depending on the user and the permissions assigned to that user. New applications can be added to the suite of web-based applications and to the home pages of users based on the permissions associated with the application.

Any organization requiring the provision of secure access to one or more web-based applications needs WAM. This document describes the components that make up WAM, outlining the requirements for developing "WAM-aware" custom applications and also interfacing with "non-WAM-aware" applications that already exist. Using a WAM suite of applications is discussed, as is using the WAM Admin Application.