Abstract: A method and apparatus for establishing a security inflow contract between a work-initiating system and a work-performing system. A portable, generic security inflow contract between an EIS/connector and an application server is provided that enables the connector to establish security information while submitting a work instance for execution to a work manager and while delivering messages to message endpoints of the application server. The security inflow contract enables all activities of a work instance that is submitted by a connector to be performed in the context of an established identity, thus insuring that all interactions between an application server and an EIS/connector are secure, and may prevent unauthorized access to application components deployed in an application server.

Abstract: A method and apparatus for establishing a security inflow contract between a work-initiating system and a work-performing system. A portable, generic security inflow contract between an EIS/connector and an application server is provided that enables the connector to establish security information while submitting a work instance for execution to a work manager and while delivering messages to message endpoints of the application server. The security inflow contract enables all activities of a work instance that is submitted by a connector to be performed in the context of an established identity, thus insuring that all interactions between an application server and an EIS/connector are secure, and may prevent unauthorized access to application components deployed in an application server.

Abstract: A non-programmatic method for bootstrapping a user database from the web tier using pass-through server-provided form targets is disclosed. A “form target,” used in this context, is the submission destination of an HTML form, submitted via HTTP (typically this is called an “action” in HTTP). The “form target” is usually the name of a CGI script, or an alias to an ASP, Servlet or JSP on the server, which will handle a form request. When the user submits a form via HTTP, the application server will extract security data and then pass control back to an application success target or a failure target.