MemoryLeak
MemoryLeak

Reputation: 7318

How to implement single sign-on in my java project?

I need to implement single sign-on in my java web application which can achieve the following features: All the computer joined in my domain smb.local , after user login in the computer, and type http://localhost:8080, my application know to use the current logined user to login into my web application. So what protocal should I implement ? Or any reference ? Thanks very much !

Upvotes: 3

Views: 10273

Answers (3)

Colin Hebert
Colin Hebert

Reputation: 93157

Recently I worked with CAS from Jasig, you can also check OpenSSO or Josso to have a SSO. From there, you'll find the documentation of each project and how to integrate it in your application.

For the automatic connection "as long as your logged on the computer", I'm not sure that's even possible. If it is you'll certainly need a specific browser (and some plugins for this browser).

Upvotes: 1

Andrzej Doyle
Andrzej Doyle

Reputation: 103777

If you want to "automatically" extract the user's Windows credentials, one option (maybe the only one?) is NTLM. Once you've actually got the credentials, you'll need to check them against the authoritative source - Active Directory exposes details as LDAP, so most security frameworks would be able to cope with this.

I've done such a thing a few years ago with Spring Security, including deriving privileges based on Windows group membership, and it worked very well.

Upvotes: 2

noamt
noamt

Reputation: 7805

Is the authentication centralized anywhere (LDAP, for example)?

Upvotes: 0

Related Questions