Only if no explicit logon data is provided the code should try handling SSO.
只有在没有提供显式的登录数据的情况下，代码才应该尝试处理SSO。
We will add support for all types of logon data including SSO based on REMOTE_USER.
我们将添加对所有登录数据类型的支持并实现基于 REMOTE_USER 的SSO。
There are four possible ways to pass logon data in a request to the authentication provider.
把请求中的登录数据传递给身份验证提供者有四种方法。
This will allow for decisions on the contents of the deducted logon data for each type individually.
这样就可以针对每个类型分别对登录数据的内容做出决策。
Only once a single request contains all the required logon data the provider will actually try to authenticate the request.
只有在单一请求包含所有必需的登录数据的情况下，提供者才会真正开始尝试验证请求。
To this snippet we want to add support for the 4th type of logon data, the trusted environment variable, in this example REMOTE_USER.
我们希望在这段代码中添加对第四类登录数据(可信的环境变量，在此示例中是REMOTE_USER)的支持。
To support SSO the provider must implement support for the 4th type of logon data, the environment variables as mentioned in Section 2.3.1 - logon data.
要想支持SSO，提供者必须实现对第四类登录数据的支持，即2.3.1节—登录数据中提到的环境变量。
Each type of logon data has a matching function of the IBiBusHeader2 class to be used to retrieve it from the request which is passed to the logon function.
每个登录数据类型在IBiBusHeader 2类中有一个对应的函数，用于从传递给logon函数的请求中获取登录数据。
An IBM Cognos 8 authentication provider will investigate some (for some providers configurable) HTTP variable or cookie which holds logon data suitable for SSO.
IBMCognos8身份验证提供者会检查某个HTTP变量(对于某些提供者可配置)或cookie以获得SSO所需的登录数据。
For this document we will only discuss the first step of identifying the type of logon data, the rest is specific to the authentication source being supported and hence off topic.
对于本文档，我们只讨论第一步(识别登录数据的类型)，其他步骤因支持的身份验证源而异，因此超出了范围。
A Visa maintains the user's security context, that is the logon data (whatever was used to authenticate to IBM Cognos 8), and his identity (the groups and roles he's a member of).
visa维护用户的安全上下文，即登录数据(用来向IBMCognos8验证身份的数据)和用户的身份(用户所属的组和角色)。
In the next step the logon data is passed to a full IBM Cognos 8 authentication provider using the REMOTE_USER standard header which most out of the box authentication Providers support for SSO.
在下一步中，使用标准的remote_user头把登录数据传递给一个完整的IBMCognos8身份验证提供者，大多数开箱即用的身份验证提供者都支持remote_user头。
In the next step the logon data is passed to a full IBM Cognos 8 authentication provider using the REMOTE_USER standard header which most out of the box authentication Providers support for SSO.
在下一步中，使用标准的remote_user头把登录数据传递给一个完整的IBMCognos8身份验证提供者，大多数开箱即用的身份验证提供者都支持remote_user头。
应用推荐