The server checks the user's permissions and retrieves data or other requested resources if the user is properly authorized. In either case, Web authorization tools offer a number of benefits, he said, including enabling the use of a single user directory and a centralized repository for authorization data, down to the page-level. In some instances, the tools also offer delegation of administration, user self service, such as for resetting passwords, and fine-grained control over authorizations. That's not to say realizing all those benefits will be easy. You can do it, but it'll take you 18 months.
Users get into particular trouble when they try to customize the tools.
That could come back to haunt you if you decide to go in a different direction down the road, such as if your vendor is acquired. But if customizing is troublesome, building your own authorization software is even worse. Each product has its strengths and weaknesses, as detailed in the chart King presented. A number of vendors inhabit the second tier. Also at the top of the second tier are Oblix and OpenNetwork Technologies.