We have integrated a back-end web application into SharePoint 2010 using the BCS and the OOTB Web Services connector.
The data in the backend system is protected by ACLs and we need these ACLs to be applied when displaying results in SharePoint search.
Our back-end web application does not use windows authentication and implements it's own ACL system. This means we cannot generate the necessary binary windows security descriptors to make use of the WindowsSecurityDescriptorField mechanism.
We made use of the run time search trimming by adding an AccessChecker MethodInstance to our Entities
This works perfectly for SharePoint Enterprise Search however the security trimming is not applied when using FAST Search.
According to the FSA Data Flow document it seems that security trimming is supported based on claims.
It might be possible to map our web applications ACLs to claims however I can't find any documentation on how to configure this.
Can any one confirm this is technically possible in the context of the BCS?