CODEWITHSUNDEEP
apachesingle-sign-onshiro
user1651520
user1651520

Reputation:

Apache Shiro and SSO

Apache Shiro is a Java security framework and support SSO. And I have multiple sub-domains, each of which has separate application running. How can I use Apache Shiro web filters(or any other) to provide single sign on.

Should I need a SSO server or service (like CAS?) before I use Apache Shiro ? Or Apache Shiro do not need SSO server or service (like CAS) ?

Thanks

Upvotes: 9

Views: 9392

Answers (2)

MukulChakane
MukulChakane

Reputation: 83

For Shiro to support SSO, Cas is now deprecated, you need to use buji-pac4j library to support SSO using multiple protocols like SAML, OpenIdConnect, etc.

Upvotes: 0

Michael
Michael

Reputation: 10319

I am not Shiro expert, but I will try to help you.
According to my understanding Shiro does not provide SSO service out of the box. You need to use CAS filter as SSO service. Please look the following page that explain you how to define Shiro CasFilter: http://shiro.apache.org/cas.html

Upvotes: 5

Related Questions