josso

I am trying to implement SSO for my application. My application currently runs on Tomcat application server, I heard that its not possible to implement SSO (install web agent) on application server rather we need a web server which directs the user to the application (running on application server). Is that right? Can someone confirm? It depend what tool / framework you use for SSO. For example, JOSSO supports Tomcat: http://www.josso.org/confluence/display/JOSSO1/Setup+JOSSO+Agent+%28SP%29 . Please look in your product support matrix if Tomcat is supported. In addition there is SSO feature in

I am investigating options for single sign-on between two disparate systems: one .NET, one Java EE. They are each managed independently and have separate user management, with some overlapping users. I would like to be able to link from one to the other without re-prompting for password. There seem like there are many options for SSO products and protocols out there. I'm fairly confident I could code up a one-off to generate and validate my own secure tokens but would prefer not to re-invent the wheel. What would you recommend, in terms of approach and/or product (preferably open source)?

I keep on facing this question from my manager how SSO will work if client disable cookies but I don't have any answer. We are currently using JOSSO for single sign on. Do we have any open source framework which support single sign on without using cooking mechanism. In the absence of cookies, you're going to have to embed some parameter in each url request. e.g. after logging in you assign some arbitrary id to a user and embed that in every link such as http://mydomain.com/main?sessionid=123422234235235 . It could get pretty messy since every link would have to be fixed up before it went out

What are your recommendations for a basic, centralized identity management/SSO service? It must be open source, have a pluggable identity manager (eg: LDAP, DB, openID, etc.) and provide a decent range of API access options (eg: web services, REST, etc.). It must also be clusterable for high availability. JOSSO? CAS? others? There are a number of open source SSO solutions, OpenAM/OpenSSO , CAS Server and Shibboleth . Dont forguet simpleSAMLphp if you looking for SAML support or HybridAuth if you just looking for a SSO library. webcoder WSO2 as described here . It's absolutely free, Java based

Are there any alternatives for JCIFS NTLM library? Waffle - https://github.com/dblock/waffle Has filters, authenticators, supports spring-security, etc. Windows-only, but doesn't require native DLLs. To be honest, you should not look for one. For your SSO needs you should use proper kerberos / SPNEGO instead of the legacy NTLM. For that stuff you need no special libraries as JVMs are already enabled for doing that automatically. All you have to do is to configure your application and JVM security policies properly. The official documentation from Sun should give you all the details you need,