The Web Client does not supply a password. The Service Broker then asks the Name Server for a complete description of the user, including the user's name and password, group membership, and default Repository category. The Service Broker creates a session token, encrypts this session token using the user's password and passes back the encrypted session token to the Web Client. The Web Client decrypts the session token and validates the password supplied by the end user. The Web Client must pass a valid session token with each subsequent transaction.
Portal security ensures that transactions without valid session keys are denied.
At service agent startup, the Name Server authenticates each service by name and password. Portal system managed by one Name Server is called a domain. Each domain is a Brio. Portal service manages the storage of objects. Only this service has direct access to storage.