Supports the Java Security ACL API.

Authentication: implements the Java Naming and Directory Interface (JNDI) which connects the SilverStream server to multiple servers in the enterprise.

Advanced Authentication Features: The SilverStream application server can process logon and logoff programmatically, e.g., with HTML logon pages using users' credentials rather than the browser mechanism, and, offers autosystem logoff by a user-defined criteria such as session expiration and administrative lockout. The administrator can build server-side Business Objects which interface with other security systems.

Data Privacy and Integrity (Encryption): SilverStream uses standard SSL 3.0 protocol with RSA and DSA public key/private key encryption between Client and Server.

Access Control: the developer can apply access control to...

1) SilverStream Server and its management functions.

2) Applications on that server.

3) Individual data base tables.

4) SilverStream Pages, Forms, Views, Business Objects, etc.

5) Individual controls on a Form or Page: e.g., a specific field and button programmed to not appear for the wrong user.

6) Security may be placed on the data itself, such as data base rows.

7) Can create security expressions, such as a client may only access records where a specific company is the supplier.