SSO + JAAS

[Brij Garg]

Hi,

I have two applications on my local server (Tomcat). I wanted to implement SSO between these applications. I have created a separate login module (by using JAAS api) for both these applications. I am able to authenticate users to each of these applications individually.

But I do not know how to bring SSO between these two application. I am invoking one application from the other application.

I read on http://www.devx.com/Java/Article/7865/0/page/2 regarding SSO using JAAS. If I write the login module of both the application in the same JAAS configuration file then where the login module code for the applications should present. Currently login module code is at the application level.

sample code for the JAAS config file is given below

JAAS_Module {
   SimpleLoginModuleapp1 required debug=true;
   SimpleLoginModuleapp2  required useSharedState=true;	
};

In the above code
SimpleLoginModuleapp1 is the login module for the first application and SimpleLoginModuleapp2 is the login module for the second application.

I hope I have put my question correctly.

Thanks

[Brij Garg]

some kind of input will be really appreciated.