SDK Guide › Authorization and Authentication API › Programming Guide › Remote Authorization API

Remote Authorization API

The Remote Authorization API lets a client application perform an authorization check against a remote authorization server. This is useful for a site that has a CA ControlMinder authorization server and clients-not necessarily running CA ControlMinder-running applications that require an authorization check from the server. This is done in three phases.

1. Login phase. The remote authorization API invokes the lca_rmtauth_Init function that performs a login to the remote server. It does this by supplying the password of the user for whom the client application runs, and checking it against the user's password on the remote server.
2. Authorization request phase. In this phase, the API invokes the lca_rmtauth_CheckAccess function that sends the server all the information needed to check authorization. This includes the user name, the class, the object, and the access type. The function returns a structure of type API_AUTH_RES that includes the request result. This function is a remote version of the SEOSROUTE_RequestAuth function.
3. Termination phase. Here the API calls the lca_Terminate function that closes the connection to the server and frees any allocated memory.