摘要: Web presence has become a key consideration for the majority of companies and other organizations. Besides being an essential information delivery tool, is increasingly regarded as extension organization itself, directly integrated with its operating processes. As this transformation takes place, security grows in importance. IBM Tivoli Access Manager offers shared infrastructure authentication access management, technologies that have begun to emerge commercial marketplace. This paper describes Authorization Service provided by e-business (AM) use AM family members well third-party applications. Policies are defined over protected object namespace stored database, which managed via management console accessed through API. The abstracts from heterogeneous systems thus enables definition consistent policies their centralized management. ACL inheritance delegated allow these be efficiently. API allows applications own control requirements decouple authorization logic application logic. Policy checking can externalized using either proxy sits front servers or plug-in examines request. Thus, familiy establish single entry point enforce enterprise regulate corporate data.