Re: Mass authorization maintenance in JAVA

Would you rather be able to define the UME role through Active directory and just have your Java stack look for that item and reduce the admin work in the Java system?

http://wiki.sdn.sap.com/wiki/display/Security/User+Mappings+in+the+Authentication+Framework+of+SAP+NetWeaver+Application+Server+%28AS%29+Java#UserMappingsintheAuthenticationFrameworkofSAPNetWeaverApplicationServer%28AS%29Java-UserMappingOptionsforClientCertLoginModule

I don't have this setup, but I would think you could have it look for a group in AD and have Java map that to the role that you want.