Reputation: 125
I have a Spring based Web App which I would like to implement a Single Sign On solution on.
The basic flow would be:
User logs in into Windows Workstation/Desktop PC (authenticating against organisation's Active Directory)
User opens browser and navigates to Spring Web App.
Spring Web App somehow confirms that the user is already authenticated against AD and seamlessly lets them in. i.e. no challenge for username and password. In fact, the Spring web app would NEVER show a login form.
Obviously it's step 3 I am having trouble with.
I have looked at Spring Security, Kerberos, SPNEGO but I think I've just confused myself.
Upvotes: 0
Views: 284
Reputation: 689
Try yo use a Cas Server: https://apereo.github.io/cas/6.0.x/index.html
Kerberos and SPNEGO authentication are suported.
To add SSO authentication to an Spring web application is enough to add a web filter.
Avois your application of authentication process and delegate to Cas.
Upvotes: 1