A B C
Capability Question Answer
Administrative Describe the administration capabilities of the product — for example, database administration,
capabilities user and group administration, backup and recovery, cache management and Web
administration. dotCMS runs in Oracle, Postgres, MySQL and MSSQL.
Just create an empty DB and then dotCMS manages for
you. User and group administration is defined by Roles
and Permissions. We recommend backing up the entire
dotCMS directory nightly, as well as doing a nightly backup
of the dotCMS database. If you are running on a cluster
and your assets are stored outside of your root directory
you need to include those folders as well. We recommend
storing nightly incremental backups for a week with
complete snapshots occurring weekly and storing those
complete snapshots for up to a year. Every time a page is
requested by a browser, dotCMS will look in its cache, if it
doesn't find it, we generate the page using Velocity cached
files and cache all the page's information using JBoss
cache. Next time a user requests the same page it will be
8 served entirely by the cache.
Application Describe the application development tools, programming languages and application dotCMS is a Java based application and it can easily be
development tools programming interfaces (APIs) that enable users to develop and customize their enterprise customized to integrate with any Web service or to deliver
content management (ECM) applications. Which standards and development environments are content as a webservice.
supported with the APIs (for example, Web services, .NET and Java)? Please describe all APIs
available to customize the offering. Plugins offer "extension" points and allow you to
customize, enhance and add custom functionality without
having to modify the core of the system.
The web development APIs are based on Apache's
Velocity templating language and the use of the Web Tool
Kit. The recommended methodology for adding custom
functionality is a combination of writing JSR-168 compliant
administrative portlets and custom web APIs.
Applications What built-in applications do you have that would reduce the need for development (for example: dotCMS ships with wiki, blog, event, and calendar
wiki, blog, chat, event, calendar, forums). applications. Chat and forums can be easily implemented.
RIA Describe how your product supports application programming interfaces (APIs) for development dotCMS makes RAD development of rich interfaces easy.
and integration of RIAs such as product quick view, dynamic sort and filter tools. The structured content engine in dotCMS can be accessed
and queried as JSON, or as XML, either of which is easy
to plugin to RIA, flash, Jquery, Flex, etc..
Applications Describe any tools you have that simplify the linking or exporting of site content to social sites. Because dotCMS can deliver content as JSON, it makes
queries and content reuse across systems easy. We also
offer a number of macros to allow for content sharing to
12 social and web 2.0 sites.
Applications What tools do you have that would support out-of-the-box polling and rating, and in-line dotCMS offers macros that will build forms, polls, surveys,
feedback to content authors? and allow you to add ratings and comments to any content
A B C
Development Describe the architecture, languages and tools used to develop your proposed solution. dotCMS is a J2EE based CMS, and uses Velocity, Struts,
environment Hibernate, Lucene to drive content and content managed
Development Is a proprietary scripting/coding language required to customize your product? No. dotCMS is open source. Apache Velocity is our
15 environment scripting language.
Edition management Describe how editions (versions/rollback) of the Web site are managed. Do editions cover
content only or content and code? dotCMS versions all content objects, file assets, code and
pages within the system. These versions are available for
16 review or rollback when viewing a history of the content.
Edition management Does your tool natively support the storing of incremental site changes? Does it support Each content object is versioned. To store incremental
business or power-user support for reproducing what a visitor saw in any channel at any given changes would require a customization
18 Language What language is your underlying source code written in? Java
Multichannel output Does your system have the ability to drive content to multiple channels (web, mobile, email, Yes.
Multisite management How does your solution ensure consistency across site pages, while allowing flexibility within a Consistency can be driven with templates and limits on
broader spectrum of sites and sub-sites? WYSIWYG controls. Also, through permissions not all
users can have access to publish content thus creating a
channel for consistency. Hosts can be copied identically
also leading to consistent look and feel.
Page elements Describe how your product ties content elements to pages. What mechanisms are used to map In dotCMS, content is separate from pages. Yes, to create
elements to pages? a new webpage in dotCMS, the user will be presented with
a folder structure, like Windows folders. The user will click
on the selected folder and be able to select from different
options: Create new web page, Upload Image, Upload file.
If the user selects create new web page, the user will be
able to then enter the new page properties including the
available templates. Every template has a thumbnail
associated with it that shows the user how the page will
look like when created (two column, three column, home
Previewing Describe how the Web site can be previewed before launch. To which components does this dotCMS templates can be implemented to support other
apply (content, templates, code, layout)? display formats such as PDAs or printer friendly versions
by using one CSS file for each separate format. This could
be previewed before publishing by creating pages for each
22 one of them.
A B C
Reporting capabilities Describe the reporting capabilities of the product with respect to administration and site dotCMS provides the system administrator with tools to be
development. able to view and manage the following functions:
- Memory caching: To flush independents memory caches
such as: live cache, page not found cache, permission
- Static file caching: To delete all files from static caches
- Content Index: To rebuild index, shrink index, reindex a
- Import/Export dotCMS content
- Search and Replace utility
- Manage users, groups, permissions
Additionally, we have integrated Jasper Reports for
integrated, pixel perfect reporting and build custom reports
for the system as needed. For example, one report we
wrote for a client is a list of all the groups and the users
that belonged each group.
Content auditing and Describe the granularity of auditing for site content changes. Does this auditing extend to other A report can be created to show all recently modified
reporting items of the configuration? pages and content, complete with modifications to
24 templates, and files.
Site changes Describe how you would launch and rollback new site areas quickly. Yes, dotCMS allows the user to rollback and view previous
25 versions of any content object.
Staging Describe the capabilities to stage and migrate content between systems such as development, dotCMS conducts rigid quality assurance and browser
QA and production. testing to ensure our pages render correctly on the most
common browsers (dotCMS does not support IE6). We
also make every attempt to adhere to industry and
government accessibility standards such as the W3C’s
web standards guidelines and Section 508 of the Federal
Rehabilitation Act. During Implementation Acceptance
Testing and Documentation can take several weeks. This
would include Quality Assurance Testing for your site.
After that phase is complete we will go into the Formal
Launch Phase, where we do Production Server Setup and
also Load Testing. From the official soft launch date, you
have a 30 Day Warranty phase where we will fix any bugs
that you find.
Staging Describe the capabilities to stage and migrate code, configurations and customizations between Automated scripts migrate customizations and
systems such as development, QA and production. configurations between systems - but these happen
27 outside the system itself.
Staging Can code changes be staged across development and QA platforms before being deployed on dotCMS customization
Third-party content Describe how your product interfaces with third-party content repositories. dotCMS can be customized to import feeds from third
29 repository party content providers.
30 Syndication Describe how the syndication of content to third-party consumers is achieved. XML or JSON
Taxonomies Describe how metatags (in general, not necessarily SEO) are managed and deployed and how dotCMS provides tooling to manage categories and
31 internal taxonomies are defined. taxonomies internally.
Testing Describe tools within your product that supports testing pre-launch testing of sites. dotCMS allows a site to be previewed or staged before it
32 publishes the pages live.
A B C
Storage What technologies and structures does your solution use for site content, template and code Relational and disk for hard assets
33 storage? (XML, relational, etc.)
Cloud services Have you explored the deployment of your product in the cloud? Do you continue to offer this Yes. We utilize Amazon EC2 cloud deployment and have
34 option and with whom? been very successful.
Cloud services Are you able to publish to the cloud? If so, please describe how your product does this. Yes.
Archiving and rollback Describe how the product maintains and accesses previous versions of content when it is Yes.
36 revised. Does this apply to objects (images, RIA objects, etc) as well as text?
Annotation and version Does your tool support annotated workflows, rollbacks, and side-by-side, red-line version dotCMS allows annotated workflows, rollbacks. Side by
comparison of content comparisons out-of-the-box? Explain. side comparisons would be a customization.
Audit trails Describe how the product tracks modifications (i.e updater, timestamp, etc). DotCMS versions all content objects, file assets and pages
within the system. These versions, including mod user and
timestamps are available for review or rollback when
38 viewing a history of the content.
Authoring method Describe the process of creating Web content. How is content authored? What options are dotCMS allows a site administrator to define custom
available? content types and delegate the management of them.
There are many field types that can go into "Web Content",
including a WYSIWYG, tags, metadata, etc… All of which
39 are definable by the administrator.
Business user How do you support simple content creation and management for casual contributors? Is it This is handled with Permissions. A user can have very
authoring possible to easily define and manage content restrictions (i.e., maximum word/character count, limited access on a very granular level. Using a custom
formatting) at the field level. field, you can control a users input into any content item at
40 the field level.
Page building Does your solution support the ability to modify page layout with "drag and drop" functionality? Drag and drop can be supported if your template is built to
Is it possible to define templates and allow them to be populated as defined by workflows and allow that. IT is also possible to create a template that has
permissions? editable areas that can be controlled by different roles,
Web templating and Describe any in-context or in-line template editing for business users, native developer support dotCMS allows users to create and edit templates through
layout management for template and page layout management, and support for providing same services to leading the administrative interface. This makes it easy to use
template management tools. tools like Dreamweaver to create your templates and page
Content life cycle Describe how the product manages expiry and retirement of content and data. Does it handle Content can have review and expiration dates that can be
time-based publishing and removal of pages? Does it handle time-based content versioning? used for time based publishing and expiration of content.
Because content lives singly in the content store, once a
content item - say a news article - is expired, it is expired
wherever it is used or re-used on the web site.
Content retention Describe how to define content retention rules and disposition actions in your tool. dotCMS retains all content in a archived state, unless
management content is forcibly removed via and administrative tool.
In-context editing Do you support in-context (what you see is what you get [WYSIWYG]) editing? Describe how this Yes. We use tinyMCE WYSIWYG. All structure types can
45 is acheived. Is it possible to do with all data types? have a WYSIWYG.
Indexing and search Describe any built-in search tools provided by your solution. We utilize Apache's Lucene to index and search content.
Library services Describe the library services/locking mechanisms that you offer (check-in, check-out, We support locking / unlocking and full versioning of
47 versioning). content.
Previewing Describe your ability to preview rendered content in a staging area. Does this require a separate dotCMS handles staging within the system itself. A
server license? staging server would require an additional server license.
49 Records Can the product migrate web-based content to a records management system? Yes, through a customization
A B C
Searching content Describe how the tool supports search within the authoring environment. Is it possible to search Yes. You can search by content type, metadata, title, etc..
50 for objects by free text/metadata/content attributes?
Support for specific How do you support the combination of text and other page elements, such as graphics? Graphics and other page elements can be referenced
51 content types inline or as external links.
Support for specific How do you support page assets, such as graphics, logos and buttons? Graphics and other page elements can be referenced
52 content types inline or as external links.
Support for specific How do you support pass-through content that may need to be converted, such as PDFs? dotCMS support the creation of native "Exporters" which
53 content types can transform content in different ways.
Support for specific How do you support multimedia, such as audio/video and Flash? dotCMS can store any type of digital file, which are stored
content types in the physical drive of the web server. Files metadata and
a link to the physical location are also stored in the
database and in Lucene to be used in content searches.
Content import/export How do you support the bulk import and export of XML content for integration and migration? Yes
Rich media Which of the following capabilities do you support: on-demand transformation, storyboarding, dotCMS supports the resizing and thumbnailing of images
management assembly, image layering, thumbnailing, constrained cropping, resizing, rotation, color inline. These are automatically republished if the
modification, and packaged integration with full-featured DAM tools enabling automated underlying asset changes. Additional transformations can
republishing of changed assets and format conversion. be created through our plugin architecture.
57 Web 2.0 What Web 2.0 features do you employ to improve the authoring experience? AJAX, RIA, Broad browser support
Web 3.0 What Web 3.0 (e.g. personalization, semantic web) features are being explored for the current dotCMS is exploring all Web 3.0 technologies, including
58 and roadmap implementations of the solution? the semantic web. Microformats, etc.
Taxonomy and Support for defining hierarchical metadata structures. Support for semantic web tagging (RDF) Yes, can support hierarchical meta data, semantic links
metadata management as well as SEO. Should be flexible -- i.e., can specify if metadata entry is mandatory on user, and make metadata mandatory.
59 content type, and site/section levels.
Rich Internet Desired: Comprehensive support, with presentation code and content treated as discrete object Comprehensive support- yes, Minimum, yes, too.
applications types, in-line editing capabilities for both, and the ability to deploy search-engine-friendly
versions of the content. Minimum: Business users have the ability to embed RIAs into
presentation templates and associate pre-populated presentation options with XML or JSON
60 content types.
Content access control Describe the access control systems available including discrete methods (create, read, update, Create, View, Edit, Publish can be assigned to groups or
and delete) based on folders, groups, and metadata. How granular are the access control users, and can apply to the content object level
Product Describe any rich product content and catalog management support your provide. How do you Yes, all of these can be defined in the system and is done
content/catalog support search, browse and merchandising? Do you support multiple product content templates within implementation.
management based on product type? Do you support workflow around product content?
Product Does your produce allow integration of product content from multiple sources (i.e. XML, CSV file, XML can be imported and exported.
content/catalog and webservices)? Can you enable automated catalog population via business rules? Can the
63 management catalog be segmented by geography and syndication?
64 Analytics What bundled tools do you provide? Which partners do you integrate with? Site statistics, page views and click trails.
65 Analytics Can broken links be found and repaired quickly? This can be customized.
Analytics Can the product track and report on-site use and demographics? Yes, through our Personalization feature. This information
66 can be exported.
67 Analytics Do you have real-time analysis and response capabilities? Yes, including an integrated campaign manager
Analytics — Do you partner or integrate with any third-party analytics tools? Describe how customer data yes. We can integrate with 3rd party analytics, pass
integrations analytics from back-end systems empower your commerce capabilities. product id and other information to Google, Omniture,
A B C
Analytics — Partnerships (what analytics tools do you partner or integrate with?) Specify how web and e- yes. We can integrate with 3rd party analytics, pass
integrations commerce analytical information be meshed up with other Enterprise analytics. Describe actual product id and other information to Google, Omniture,
69 implementations of this. etc…
Audit reporting Does your product have the ability for users to define audit reports on an ad hoc basis? Through their analytics provider
Behavioral analysis What mechanisms do you employ to assess the behavior of an individual user (known or dotCMS has a built-in rules engine (JBoss Rules) that
unknown) in real time and enable choice of delivered content based on that analysis? Can the allows to tag users on different actions they take when
behavioural data be drawn from a third-party such as social networking sites, markeitng viewing your website. Then content tagged with similar
databases, etc. tags can be displayed to the user in different sections of
the site to recommend content they might be interested in
71 based on their browsing history.
Content Native or packaged integration with algorithm-based recommendations engine. See above.
73 Personalization Explain how the product can display content targeted toward specific user profiles. Yes, see above
74 Personalization Does the product target content based on visitor-supplied preferences? If so, how? Yes, see above
Personalization Can the product personalize a site based on customer transaction data? Explain how this is Yes, see above
76 Personalization Can the product apply personalization rules to elements smaller than pages? Yes, the above is also true for content objects.
Compliance How does your system verify content for hygiene (e.g. accessibility, spelling, format validation, XHTML compliance.
77 privacy, security, speed of deployment)?
Recommendations Do you support on-the-fly catalog creation/customization? Yes. All template creation and customization is done
78 through the admin tool.
Design tool integration What IDE/desktop design tools can be integrated with the product? dotCMS allows users to create and edit templates through
the administrative interface. This makes it easy to use
tools like dreamweaver to create your templates and page
Dynamic presentation Describe how templates support dynamic presentation of content. dotCMS supports both static and dynamic content
of content presentation. Lists of content objects can be dynamically
delivered or they can managed as static lists.
81 Link management Describe your link management capabilities. Link management can be handled with 3rd party.
Maintaining Describe how the solution allows for the reuse of contents and templates to enforce a common Content is separated from the page and therefore lives
consistency “look and feel” and brand identity. independently and can be reused easily. When adding
new content, users will have the option to reuse content.
Users can also select from provided list of templates from
a dropdown list with a thumbnail preview. All of this is
controlled to enforce common "look and feel."
Multivariate testing Describe your multivariate testing capabilities. In dotCMS, it would be possible to create a multivariate
widget to use multiple pieces of content and based upon
them, to track views and success rates of particular
campaigns. This would be done during a sites
A/B and multivariate Native or proven integrations for rapid A/B and MV testing of site alternatives. (Note: MVT dotCMS supports customization and personalization. As
testing requires automated testing of dozens of alternatives (i.e. "full factorial"). Enable automated mentioned above, a widget could provide full factorial
content testing. testing of multiple content items for a given area.
A B C
Devices Does the product support preview of site pages on multiple virtual or real devices such as print, Yes. dotCMS templates can be implemented to support
mobile, IPTV? If so, how? other display formats such as PDAs or printer friendly
versions by using one CSS file for each separate format.
This could be previewed before publishing by
creating pages for each one of them.
Localization Can the product support content in multiple languages? If so, how? dotCMS fully supports content and containers, pages and
templates in multiple languages. We have a macro that
allows you to pull content that is language specific.
87 Localization Can you support multiple versions of the same site using the same WCM instance? Yes.
Layout Does your tool support the creation and management of multilingual (including R-to-L) content? Yes, including R-to-L.
Process-driven Does your product support or integrate with translation management process software? dotCMS supports the translation process through
translation intelligent prepopulation of language defaults and the
89 workflow process.
Supported languages If your product supports a certain subset of languages, which ones are supported? Out of the box it can support all languages.
Multilingual content Does your tool support versioning and rollback of source/target pairs content? Does it display dotCMS has versioning and rollback. It does not have side-
management side-by-side pairs with highlighting of differences? Does you r product support automated by-side comparison. This could be customized.
extraction/return of content in appropriate formats? Does it support the export of content marked
for localization? Does it support this via a web-based UI?
Tool localization Describe any ability to localize product's administration tools, including templates, error All admin tools can be internationalized, including error
messages, documentation, and administration interfaces messages, templates and admin interfaces.
92 Documentation is in English.
Multisite management Does the product directly support site cloning and template/content inheritance to enable, for Hosts can be copied. This includes all folder, pages, files,
support example, rapid creation new (possibly password-protected) micro-sites from existing ones? etc…under the host. Hosts are treated as content and can
Does this include the ability to inherit site management permissions? Can the copy then be have extra fields and variables added to them.
93 modified to suit?
Site cloning Explain how someone would go about creating a duplicate or template of a subset of pages for Templates can be copied and containers can be modified
further modification. How does inheritance in your tool support this process? to support a subset of templates. Templates can be not
94 inherit, thought.
Content distribution How would your product take advantage of a content distribution network to speed up the dotCMS can leverage CDN through a plugin created for
95 delivery of content? that purpose.
Content distribution How would your product take advantage of a content distribution network to ensure a failsafe, See above.
96 highly available network of servers?
97 Content distribution Is there edge network support? See above
Layered approach Explain how your product supports the separation of user interface from application from data dotCMS supports this through our plugin architecture,
which allows an organization to extend dotCMS at various
models. What support is inherent in the tool for enforcing this separation and the creation of new
resources in each layer? layers of the application, from the DAO level to the API
98 level to the UI level.
Mobile browsing In what ways does your platform support the creation of mobile web sites? Yes. dotCMS provides a framework to reuse content
99 natively across channels, including mobile.
Single sign-on Does your content management backend allow for foreign user databases via LDAP, oAuth, etc.? dotCMS integrates with LDAP and easily with other third-
Alternately, can your content management user database easily serve as a user database for third- party applications.
100 party applications?
Code reuse techniques Describe how your solution allows for code reuse within and across sites? How does the system dotCMS allows code and content to be used across sites.
allow for overriding these standards? Code can be referenced, or not, across domains if the
101 proper permissions are applied.
A B C
Field types Describe the variety of built-in field types in your product (video, heirarchical, etc.). Describe all Text, Hierarchical, Binary (video, file assets) images,
customization options available (API, programmability, customization, inheritance and code numeric, dates, rich text. Custom fields and field types
102 reuse, etc.) can be created by administrators.
Multiple domain Describe how your product supports publishing content to multiple domains, possibly stored on A single dotCMS instance can effectively manage
support disparate machines hundreds of domains and can publish content to them,
share content across them all based on permissions.
Test-driven Describe how your product supports test-driven development. dotCMS provides a simple, understandable development
development environment that can be used to extend dotCMS in a
multitude of ways that can include multiple development
methodologies, including test driven development.
Browser-based Describe how your product supports browser-based application testing. dotCMS can be tested with browsers or browser
105 application testing automation tools.
Aggregation during Describe how your product supports the ability to publish/compose pages with dotCMS allows users to connect to external resources and
publishing content/data/functionality from disparate repositories, sites, and/or applications. use them in pages served by the dotCMS platform,
including resources in XML, accessable via web services,
106 or via JDBC.
Cache configuration Explain how your product supports the definition of cached objects and frequency of cache dotCMS automatically caches objects in the system and
refresh at serve time. invalidates the cache when the objects are updated.
Mixed models Explain how your product supports publishing of both static and dynamic content within a site. dotCMS allows the presentation of pages created using
the CMS, and also provides the possibility of serving
HTML pages external to the CMS. These external pages
need to be saved under the webroot of the dotCMS
installation, and they will be served by Tomcat as a regular
Publish to portals Describe your support for publishing content to leading portals, including single point of dotCMS can publish content to a variety of channels.
presentation management, and in-line editing of content in the portal environment. Portals can consume content in dotCMS using XML feeds
or via RSS. Content can be updated in a portal if the
portal is a CMIS compliant client with editing capibilities.
Publishing and Explain how you support dependencies during publishing , including transactional publishing Publishing in dotCMS is transactional and when publishing
dependency and deployment, automatic detection of dependencies, in-line link checking, and detailed error a page, all content dependencies are resolved and can be
management reporting. published together. Error reporting is shown inline, in edit
mode, to provide easy debugging of any issues.
Publishing diagnostic Describe the diagnostic tools available to troubleshoot publishing issues. dotCMS provides inline error reporting viewable in edit
tools mode in when publishing content. This allows a web user
to update or correct any errors without affecting the live
SEO Describe all URL customization mechanisms available in your product. dotCMS allows URL Aliases, URL rewriting and vanity
URLs. Additionally all pages in dotCMS use real URLs
112 that can be user specififed by default.
SEO Describe the built-in mechanisms used to support SEO. For example: site map generation, URL Yes, dotCMS provides a built-in macro to create sitemaps.
rewrite, 301 redirects, and metadata requirements? Describe who and how these capabilities are The formatting of the sitemap is determined by creating
managed. the necessary styles. dotCMS also provides the function
for vanity URLS, redirects and metadata.
A B C
Benchmarks: number How many concurrent workflows can the system support? No limit.
Benchmarks: number How many concurrent consumers can the system support? No limit.
of users (consumers)
Benchmarks: number How many concurrent contributors can the system support? No limit.
of users (contributors)
Clustering What kind of flexibility do you offer for the placement of public and internal-facing components This is dictated by the template design. We do not limit
117 near to their respective consumers? this in dotCMS.
Performance Describe the scalability of your solution and the features that enable that scalability. The dotCMS system, in a clustered configuration, is
designed to scale as more front end servers are brought
into the cluster. At the core, node file system IO is the
limiting factor for scalability.
- DB hits are eliminated or minimized
The system is designed to use clustered caches that
eliminate any reliance on the database to serve front end
- Node level content index
Each node is responsible for maintaining an up to date
content index on it's file system (required for content
searches and dynamic content delivery).
- Distributed Caching Mechanism
Invalidates objects cluster wide, objects which are then re-
instantiated lazily, as needed.
-Tree like virtual file system insures that files are
distributed evenly across folders.
Multiple instances could be deployed for different business
units. A large scale cluster could be deployed, though the
administrative interface would require an infinitely scalable
db to provide service unlimited for unlimited dotCMS
Performance- Describe the performance-enhancing features provided by your product — for example, caching, Every time a page is requested by a browser, dotCMS will
enhancing capabilities server clustering, load balancing and replication. look in its cache, if it doesn't find it, we generate the page
using Velocity cached files and cache all the page's
information using JBoss cache. Next time a user requests
the same page it will be served entirely by the
cache.dotCMS can run on multiple servers out of the box
and we have worked with our clients in the past to have
multiple webservers and replicate content between them.
119 This is something we can definitely work with you on
Sample scale Describe the largest knowns installation of your solution. How many public servers? How many Hospital Corporation of America will be deploying over 700
internal-facing servers? How many users? sites on one instance of dotCMS. They have 2 cluster
nodes for production, 2 db boxes for production, 1 staging,
1 development, 1 load balancer and 1 utility box. They are
also running 1 stand alone instances of dotCMS as well as
1 sandbox environment. There are hundreds of users.
A B C
121 Scalability What is the maximum number of pages and components per server? There is no maximum.
122 Scalability What is the maximum number of interoperating servers? No maximum.
"Captcha" Do you provide captcha capability within the solution? What about other challenge-response Yes.
Authentication Describe how your application supports authentication (for example, Lightweight Directory dotCMS supports authentication via LDAP.
Access Protocol [LDAP], Windows NT Domains, Active Directory; please specify). With what
other solutions does it connect? On login dotCMS will first attempt to login the user against
the LDAP authentication system configured, if not found, it
will search for a local user. Local users can be created by
CMS Administrators. Once authenticated, Users have
single sign-on access to all of the system’s components
and all the website hosts that they have permission to edit.
Provisioning and Group membership can also be driven by
information in LDAP, which in turn affects which content
and workflows a user has access to.
Group-level security Describe the capabilities for group creation and rights assignments. dotCMS has always shipped with very powerful and
and permissions granular permissions. Simplification can
mean many things. In this case we have made managing
complex and simple tasks easier.
1. We have hierarchical roles and role membership
2. Permissions can be set from a role for folders and
hosts. This means that folders and
hosts can inherit permissions or can set their own
permissions individually. These
inherited permissions can be controlled from the role
manager making pushing large
changes of permissions and adding a new permission
much simpler then in previous
versions of dotCMS. You can even cascade your changes
from the role manager forcing
permissions down from any host/folder.
3. The owner is visible and controllable via the UI.
125 4. There is Login As functionality in dotCMS
Levels of security Describe and list the levels of permission needed for security access. You can designate the levels.
Role-based security Can the product restrict access to content or areas based on the user's role within the system? Yes.
Security How does the product provide administrative access control on a subpage level? This is baed on a users Permissions. All content and
128 subpages can be permissioned.
129 SAML Does the product support Security Assertion Markup Language (SAML)? dotCMS does not support SAML.
OWASP Describe how your technology can prevent clients from being exposed to SQL injections by We lock the db down so that only the required permissions
hackers are being used. We also can lock the file system and
underneath OS down to further prevent attacks therefore
making secure remote access available for users outside
130 the internal network.
OWASP Describe what other built-in methods are avaliable to prevent other deliberate attacks on the dotCMS provides tooling to prevent XSS and SQL injection
website? attacks at the request level. Captcha and internal tools
131 prevent form spam attacks.
A B C
Security architecture Describe your security architecture and how your application handles security/access to content dotCMS uses standard Internet protocols to communicate
— definition, authentication and implementation. with various other systems. This includes HTTP, HTTPS,
JDBC, SMTP, LDAP, JMS and Multicast. To ensure
security, we use SSL to encrypt content that is transported
over non-trusted networks. The site can be configured to
be accessed remotely through a secure SSL connection.
Campaign execution Does your tool provide the ability to manage multi-channel dynamic campaigns? If so, how? Yes, dotCMS can publish and manage mutlichannel
campiagns, mobile, RSS, email and web through the
133 administrative tools within the system.
Accessibility What accessibility standards does your tool support? All HTML generated by dotCMS is generated from the
templates. All templates are created by website
administrators or webmasters so this depends on whether
the templates are compliant to start with. If we are
responsible for developing your templates we ensure that
134 all code generated is valid and compliant.
Site navigation What tools do you have that would support the automatic generation of navigational elements, All menus, crumbtrails, heirachies and site maps are
management for example, from site heirarchy, taxonomy, etc. automatically generated by the system based upon where
a page resides given the sites information architecture. If a
section or page is created, moved, renamed, the
navigational elements on the page will reflect that change.
All content in the dotCMS system can be placed within a
customized taxonomy that is definable at runtime. Site
developers can use this taxonomy to pull customized or
related content and provide a site visitor with a
135 personalized experience.
Email Describe any tools your have that support the creation of MIME emails using native capabilities. Yes, dotCMS allows Multipart (rich html) Emails to be
136 created and sent through the campaign manager
Print-on-demand Describe native capabilities to published content into defined print templates. Yes, a stylesheet for media print needs to be created to
allow for a print version to be generated automatically. This
stylesheet needs to be added to all templates where the
137 printer version is needed.
Ad servers Do you provide integration with ad servers? If so, describe how. Ad server integration can occur at the host, template,
channel or content level, with appropiate calls being made
dynamically, based on rules applied by the web master.
Client platforms If your product is not browser-based, describe the client platforms supported, the operating dotCMS is browswer based.
system supported, and the minimum hardware requirements of client systems.
Database support List the database management systems you support. PostgreSQL 8.0+, MySQL 5.0+, Oracle 9+, MSSQL 2005,
140 DB2 (requires customization)
Integration features Identify the digital asset management products that you integrate with out of the box or for which dotCMS allows users to connect to external resources and
you have prepackaged connectors. use them in pages served by the dotCMS platform,
including resources in XML, accessable via web services,
141 or via JDBC.
Integration features Identify any other products that you integrate with out of the box or for which you have dotCMS is a very robust platform for integration and
prepackaged connectors. expansion, and this is exactly how the system should be
approached. It is extremely easy to integrate with 3rd
party datasources or create custom administrative
142 modules as needed.
A B C
Portal integrations Identify the portal products that you integrate with out of the box or for which you have
prepackaged connectors. List the portal products with which you currently integrate using The CMS has been integrated with SCT Banner, Jenzabar,
143 custom solutions. IMIS, and TIMMS.
Product release Describe and explain your product release and update schedule, and any future strategy. A. dotCMS releases patches every month. Releases are
every year and are not mandatory. With dotCMS
Enterprise® is the automatic updater. All releases and
upgrades under our Enterprise model are covered under
Server platforms Describe the server operating systems, Web servers and application servers you support. dotCMS is a 100% J2EE Java application that can run
equally on Windows or Unix Servers over any JSP /
Servlet container such as:
- Oracle App Server
145 - JRUN
146 Source code Is the source code available to purchase? dotCMS is an open source product.
Standards Describe the industry standards with which your product is compliant — for example, XML, XML, WebDav, SOAP, REST, drool, and Jboss rules. We
WebDAV, SOAP, REST, Business Process Execution Language (BPEL) and JSR 170/283. have the same feature stack as JSR 170, but we do not
147 support it. We also do fully support CMIS.
Supported APIs What open APIs and standard languages do you support? dotCMS is JSR - 168, written in Java 5 and above. We
support HTML, CSS, Flash, Velocity, and other web based
Web services and SOA Describe how your product supports Web Services or service-oriented architecture (SOA). If this dotCMS is a Java based application and it can easily be
is planned for a future release, please provide a time frame for availability. customized to integrate with any Web service or to deliver
149 content as a webservice.
Additional features List additional features that you provide out of the box that enhance the usability of the authoring WYSIWYG authoring tool, Content types, tagging,
150 interface. searchable content, Easy Form Builder tool.
151 Reporting Can the product log reports of the status and history of a piece of content? Yes
152 Reporting Can the product view content source and descriptive information? Yes.
153 Reporting Is there the ability for user-definable audit reporting on an ad hoc basis? Yes, on a per object basis.
154 Reporting Can the product integrate with external reporting tools? Yes.
Required training Describe incorporated functionality that reduces the required level of technical training of users dotCMS's use of velocity as our templating language
to interact with your product. provides webmasters to easily create functional and
dynamic web sites without having to resort to XSLT or
Java. Our web tools allows webmasters to create widgets
that abstract complexity and can then be used on pages to
easily allow content editors to display different functionality
such as Photo Galleries, Content tickers, RSS feeds, etc.
Unique capabilities Describe any distinguishing usability features that make your product better than that of the In dotCMS, Roles and Permissions are extremely granular.
competition. What this means for Administrators and Content
contributors is that based on your permissions, you willl
only have access to certain tools and functions. Therefore
the process of contributing content can be extremely
simple and fast...even down to the WYSIWYG tools
provided. This also means some users may have access
to only certain pages. The power of granularity dotCMS
provides contributes to a simple and powerful WCM
experienece for all users.
A B C
157 Wizards Do you supply wizards to help users with frequently performed tasks? Yes
Archiving Describe how content from the Web site is archived and removed using workflow. Content can be set to expire during the workflow task itself.
A review date can be set for content that will automatically
create a workflow based on the date set for content review.
159 Audit trails Is it possible to create an audit trail of all actions carried out on the workflow package? Yes
160 Creating workflow Describe the method of workflow creation (graphical/scripting, Visio, etc)? dotCMS provides a linear workflow out of the box.
Review and approval Explain the review and approval process for Web content.
Users are typically set up by the administrator to be
notified by email with either read, write and or publish
access depending on their access rights. Notifications are
standard, but dotCMS also provides the ability to add
additional comments to each workflow task if needed. Not
every user will have publishing permissions and therefore
161 can send the content back for review and then publishing.
162 Workflow Can the product move a package of associated content through workflow together? If the content is packaged as a single structure, yes.
Workflow Can administrators copy and modify existing workflows? This can be customized.
Workflow Can administrators add or change business rules in the tool? Yes, based on roles and permissions
Workflow alerts Can users define how and when they wish to receive notifications? Currently all workflow notification is through email, but can
165 be configured differently if desired.
166 Workflow capabilities Can content be flowed backward for rerouting? Yes.
167 Workflow capabilities Can users configure authority for everyone in the workflow chain? Yes. This is done with Permissions.
168 Workflow capabilities Can one author route different workflows based on document type? Yes.
169 Workflow capabilities Can a package of associated content be moved through workflow together? If the content is packaged as a single structure, yes.
170 Workflow capabilities Is it possible to copy and modify existing workflows? Yes. This is done with Permissions.
171 Workflow capabilities Can a workflow be overriden? Yes, if the user has proper permissions to do so.
Workflow capabilities How are business rules managed in the solution? Either through the interface or through the plugin
Workflow capabilities Does the solution offer journaling - the ability to annotate content inside the workflow without it Yes, comments and notes can be added to workflow
173 affecting the content? tasks.
174 Workflow capabilities Does the product provide a status of content progress through the workflow? Yes.
Workflow capabilities How flexible is the process to define who is alerted at which steps in the workflow? Workflow is task and role based. If user has proper
permissions, he or she can notifiy any other user.
However, if user has limited permission, he or she will only
175 be able to notify designatied users.
Workflow capabilities Does the product have the ability for users to define how and when they receive notifications? Currently all workflow notification is through email, but can
176 be configured differently if desired.
177 Workflow complexity Can the product create dynamic, if/then workflow decision trees? This can be customized.
Workflow configuration Can users configure authority for everyone in the workflow chain? Yes, if they have the proper permissions.
Workflow configuration Can one author route different workflows based on document type? Yes, if they have the proper permissions.
Workflow extendibility What is the maximum length/width (nodes/threads) of a workflow chain? Unlimited. Based on number of users.
181 Workflow flexibility Can users alter or override the workflow for specific content objects? Yes, if they have the proper permissions.
182 Workflow reporting Can administrators define who is alerted at which steps in the workflow? Yes.
Workflow status and Can the product provide status of content progress through workflow? Yes.
A B C
Workflow Is workflow flexible (for instance based on the user)? Describe how workflows are managed. Users are typically set up by the administrator to be
administration What kind of workflow reporting (i.e., status, aggregate reporting, and bottleneck reporting) is notified by email with either read, write and or publish
available? access depending on their access rights. Notifications are
standard, but dotCMS also provides the ability to add
additional comments to each workflow task if needed.
Users can track their tasks and assignments by login to
the backend of the site.
Services Describe the range of commerce services that are provided by, and/or integrate best with, your dotCMS comes with basic commerce capabilities out of
product. Describe the means by which these services are typically integrated and customized. the box. However, we have partnered with KonaKart to
create CMS driven eCommerce. This architecture
introduces system segmentation from core infrastructures,
which is vital to the stability and security of e-commerce
inner-workings. Benefits include: * Enabling the
marketing and community managers to introduce new
campaigns and functionality with minimal IT participation.
* Empower marketers and channel/outreach specialists
with tools to help promote local events for stores and
* Enable the unification of community content with
standard e-commerce content.
* Enable a unified tagging solution for products, expert
advice, product review, etc.
* Syndicate data between wholesalers, retailers,
industry experts and customers.