Entando technology

12/7/2012 Entando all rights reserved 1 12/7/2012 1

Entando Technology

www.entando.com

[email protected]

12/7/2012 Entando all rights reserved 2

Product Positioning


Entando Guidelines

• Lightweight technologies

• Highly performant

• Essentiality: only what you need

• Modularity

• Compliance with standards (when they are useful)

• High flexibility for customization

• Software quality

• Agile Software Methodologies


Entando Benefits

• Technology Benefits

• infrastructure and model guides for development

• Organization Benefits

• separation between development and use phase

• separation of professional skills job

• Results Riusability

• separation of information and services from graphics and presentation

• riusability, multi-device


Entando Projects Life Cicle

Life Cycle Phases Actors

Conception and design designers, analysts, communication and domain experts

Development/production designers, Java developers, web developers

Installation system administrator

Management and update portal manager, supervisor, editor

Use web users

Evolution developers


Architecture

• Interfaces with different technology for front-end and back-office

• Modular design

• Strong decoupling of layers

• Services oriented

• Plug-in pattern


Architectural Model


Accessibility

• Web accessibility: people with visual, auditory, motor and cognitive disabilities can have equal access to information, data and functionalities

• International Guidelines (W3C WCAG)

• Specific governments laws such as Section 508, Stanca Law and PAS 78

• Entando was born with the goal of accessibility

• Entando back office is accessible


Users, Authentication, Authorization

• Entando includes a set of entities and basic features to manage user identity

• Role based authorization, different for functions and data

• The authorization service is based on abstract entities and services that may have various implementations

• Separation between entities user, authentication service and authorization service

• Services can be internal, external and combined


Entando Authentication

• Internal (default):

• based on credentials and "weak" authentication

• External:

• LDAP, AD

• Smart Card, CNS, BusinessKey

• Kerberos and SAML 1.0 Support

• Single Sign On (CAS)


Authentication/Authorization Patterns

• Internal

• authentication and authorization through services and local data

• External authentication, internal authorization

• authentication through external services (LDAP, CNS)

• authorization based on local roles

• External authentication, external authorization

• authentication through external services

• authorization based on external roles (LDAP)


Front-end basic entity

• Page

• abstract container with some properties

• organized in a hierarchical tree

• associated to a presentation template

• Page Model

• defines the page layout

• Showlet

• abstract element of view aggregation

• based on standard Java EE technologies

• information and services exposed on pages through showlet


CMS

• CMS based on a robust and extensible conceptual model

• Highly configurable in terms of data structures and presentation of information

• Allows sharing and reuse of contents (XML)

• Easy to use in editing, updating and publishing phases

• Accessible

• Versatile (eg. faceted navigation)

• Evolution of the CMS interface with two Web Client: "Normal " and "Advanced "


Normal Client

• The Normal Client is compatible with accessibility international standards and specific governments laws such as Section 508, Stanca Law and PAS 78


Advanced Client

• The Advanced Client is based on CSS3 and shows a sidebar menus


Some CMS Features

• Independent web content archive • Configurable content structure • Correlation between the contents (symbolic links) • Categorization system • Images and documents archive • Native multilinguage • Indexing and searching • Total separation between information and view (User

interface) • Content formatting engine • Easy to use and powerful publishing tools • Optimized content caching


Services Integration

• Entando is designed to easily integrate internal and external services

• Showlet abstraction model leaves full freedom of choice of most appropriate techniques to integrate new services

• It is possible to extend back-office features for the management and the administration of new services


Security

• General security guaranteed by the quality of software design and implementation and OWASP

• Specific modules against front-end cross site scripting

• Support of Entando Partners


Production environments

• Ability to use in production the most suitable configuration

• Compatibility with various servlet engines

• Use of HTTP server for direct delivery of file resources

• Cluster installation (mission critical enviroments)

• HTTP and HTTPS use mode depending on user authentication state


Thanks

@EntandoSrl

Entando

Entando

Follow us

www.entando.com

[email protected]

http://twitter.com/

http://www.linkedin.com/groups?about=&gid=2570784

http://www.facebook.com/Entando

Entando technology

Technology

Transcript of Entando technology