Creating a Custom Authentication Handler for Adobe Experience Manager 6.4

You can create a custom authentication handler for Experience Manager 6.4. A custom authentication handler improved security for your Experience Manager instance. To create a custom authentication handler, you create a custom Java class that implements the Interface AuthenticationHandler.

In this article, to show an example of a custom authentication handler, two-factor authentication is used. That is, you can configure AEM to use a one-time password (OTP). An OTP is an automatically generated numeric or alphanumeric string of characters that authenticates the user for a single transaction or session.

The benefit of using an OTP is it's more secure than a static password. An OTP token is typically generated by a mobile application that displays a number. The number changes every 30 or 60 seconds, depending on how the token is configured.

When a user logs into Experience Manager, they enter their user name, password, and OTP value.



This article walks you through building a custom authentication handler using R7 annotations and a Maven Archetype 15 project. The following video shows you this use case. 



To read this development article, click https://helpx.adobe.com/experience-manager/using/twofactor64.html.