Expert Oracle and Java Security: Programming Secure Oracle Database Applications with Java

Application Login Screen

What do we mean by application login? Because we are using single sign-on, we don't actually have the users enter a user name and password, but we do have them enter the two-factor authentication code. Our plan will be to remain on the Login screen until they have entered the correct two-factor code or they have exited the program. We need to handle several cases:

• When their account cannot do SSO, we need to tell them
• When they enter the wrong or an old two-factor authentication code, we need to tell them
• When they enter the correct code we need to continue

Behind the scenes, a lot is happening. Before the user has an opportunity to enter the two-factor authentication code, the Login screen will get the user identity ...