The Common Security Module (CSM) provides a comprehensive solution to common security objectives, with flexible delivery of security tools to allow application developers to integrate security with minimal coding effort. This helps eliminate the need for development teams to create their own security methodology. CSM provides solutions for authentication, authorization, and user provisioning.

CSM provides solutions for:

• Authentication to validate and verify a user's credentials. CSM, working with credential providers including Lightweight Directory Access Protocol (LDAP), Relational Database Management Systems (RDBMS) and others, confirms that a user exists and the password is valid for that application.
• Authorization to grant or deny access to data, methods, and objects. CSM incorporates an Authorization schema and database so that users can only perform the operations or have access to the data for which they have the needed rights.
• User Provisioning to allow an administrator to create and modify users and their associated access rights.

The web-based CSM User Provisioning Tool (UPT) application can easily be integrated with single or multiple applications and authorization databases. The UPT provides functionality to create, edit, and delete authorization data elements such as Roles, Privileges, Protection Elements, Users and Groups, and also provides functionality to associate them with each other. The runtime API can then use this authorization data to authorize user actions.

The Common Security Module is distributed under the BSD 3-Clause License. Please see the NOTICE and LICENSE files for details.

You will find more details about the Common Security Module in the following links:

• [Community Wiki] (https://wiki.nci.nih.gov/x/4wBB)
• [Issue Tracker] (https://tracker.nci.nih.gov/browse/CSM)
• [Code Repository] (https://github.com/NCIP/common-security-module)
• [Documentation] (https://wiki.nci.nih.gov/x/J5V8)
• [Developer Documentation] (https://github.com/NCIP/common-security-module-docs)
• [Release Notes] (https://wiki.nci.nih.gov/x/KZt4B)
• [Installation packages] (https://wiki.nci.nih.gov/x/4wBB)
• [Forum] (https://cabig-kc.nci.nih.gov/CaGrid/forums/viewforum.php?f=29&sid=b7801af4ac91d1a2bdd9b0b7eb85157f)

Please join us in further developing and improving Common Security Module.

• [Minimum software requirements] (https://wiki.nci.nih.gov/display/caCORE/CSM+UPT+5.0+Checklist+and+Prerequisites)

• [UPT Deployment and Installation] (https://wiki.nci.nih.gov/display/caCORE/CSM+UPT+5.0+Deployment+and+Installation+Instructions)
• [CSM Programmers Guide] (https://wiki.nci.nih.gov/display/caCORE/CSM+5.0+Programmers+Guide)
• [UPT User Guide] (https://wiki.nci.nih.gov/display/caCORE/CSM+UPT+5.0+User+Guide)