The Service Broker creates a session token, encrypts this session token using the user's password and passes back the encrypted session token to the Web Client. The Web Client decrypts the session token and validates the password supplied by the end user. The Web Client must pass a valid session token with each subsequent transaction. Portal security ensures that transactions without valid session keys are denied. At service agent startup, the Name Server authenticates each service by name and password.
Portal system managed by one Name Server is called a domain.
Each domain is a Brio. Portal service manages the storage of objects. Only this service has direct access to storage. Other services and clients access objects by connecting to the Repository through the network. The Repository provides central storage for a variety of information objects, including reports and report output, queries and their results, as well as related objects, such as HTML files, graphics, and executables.