File APIs for Java Developers
Manipulate DOC, XLS, PPT, PDF and many others from your application.
The moose likes Security and the fly likes SSO + JAAS Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login
JavaRanch » Java Forums » Engineering » Security
Bookmark "SSO + JAAS " Watch "SSO + JAAS " New topic


Brij Garg
Ranch Hand

Joined: Apr 29, 2008
Posts: 234

I have two applications on my local server (Tomcat). I wanted to implement SSO between these applications. I have created a separate login module (by using JAAS api) for both these applications. I am able to authenticate users to each of these applications individually.

But I do not know how to bring SSO between these two application. I am invoking one application from the other application.

I read on regarding SSO using JAAS. If I write the login module of both the application in the same JAAS configuration file then where the login module code for the applications should present. Currently login module code is at the application level.

sample code for the JAAS config file is given below

In the above code
SimpleLoginModuleapp1 is the login module for the first application and SimpleLoginModuleapp2 is the login module for the second application.

I hope I have put my question correctly.

Brij Garg
Ranch Hand

Joined: Apr 29, 2008
Posts: 234
some kind of input will be really appreciated.
I agree. Here's the link:
subject: SSO + JAAS
It's not a secret anymore!