6.3. <mapping>
- <mapping>
- This element contains <mapping-module> elements that are used to define the parameters of the mapping-module elementsWhen multiple <mapping-module> elements are present, they form a collective group of requirements that must be met before mapping can succeed. This collective group is called a stack.
- <mapping-module>
- This element uses the
codeattribute to specify what mapping module implementation an application can use, and theflagattribute to tell the application how to parse each mapping module present in the policy stack. The flag attribute supports the following values:- required
- The module must succeed for mapping to be successful. If any required <mapping-module> fails, the authentication will fail. The remaining modules in the stack are called regardless of the outcome of the authentication.
- requisite
- The module is required to succeed. If it succeeds, mapping continues down the stack. If the module fails, control immediately returns to the application.
- sufficient
- The module is not required to succeed. If it does succeed, control immediately returns to the application. If the module fails, mapping continues down the stack.
- optional
- The module is not required to succeed. Authentication still continues to proceed down the stack regardless of whether the module succeeds or fails.
