J2EE container authentication – Portal Studio now uses J2EE container authentication and provides role-based access control to all objects, so you can have granular control in delegating permission for different actions to different roles.
Security Administration – a new Web-based user interface to manage users, groups, roles, organizations, and assets.
Search and Replace – developers and administrators can manage their catalogs more effectively by using the search and replace function.
Import/Export – import and export processes have been enhanced to include new object types, such as page groups.
Protection Level 3 security compliance standard features – significant enhancements around:
User management – self administration of passwords, frequency of password change control.
Authentication strength – systems must be configurable for password policy, for example, password lengths.
Confidentiality – transmission of sensitive data must be encrypted.
Access control – identify the security level for any secure object, grant/revoke to the individual person level, delegate access rights to other people.
Auditing – login and logout, audit reduction tool to investigate breaches, normalized database schema and added XPath searching.
Multiple certificates per user – users can have multiple digital certificates to access the portal.
Delegated administration API.
Active Directory support.
Netegrity integration, via EAServer.
