Arun Pandian k
Arun Pandian k

Reputation: 125

implement Single Sign On using Spring and Active Directory

I have a Spring based Web App which I would like to implement a Single Sign On solution on.

The basic flow would be:

  1. User logs in into Windows Workstation/Desktop PC (authenticating against organisation's Active Directory)

  2. User opens browser and navigates to Spring Web App.

  3. Spring Web App somehow confirms that the user is already authenticated against AD and seamlessly lets them in. i.e. no challenge for username and password. In fact, the Spring web app would NEVER show a login form.

Obviously it's step 3 I am having trouble with.

I have looked at Spring Security, Kerberos, SPNEGO but I think I've just confused myself.

Upvotes: 0

Views: 284

Answers (1)

Try yo use a Cas Server: https://apereo.github.io/cas/6.0.x/index.html

Kerberos and SPNEGO authentication are suported.

To add SSO authentication to an Spring web application is enough to add a web filter.

Avois your application of authentication process and delegate to Cas.

Upvotes: 1

Related Questions