Issues with SSO and is it necessary?

[Migrated From Jforum.net]

Hello

I had tried this a few months ago but had to leave the application I'm using to communicate with JForum aside. So now I'm returning to both.

With JForum, one thing puzzles me; on pages like:

http://www.coderanch.com/t/577972

Code is shown to create users and to log them in. But there is no indication here of SSO. And it is the role of SSO and the extent of it that confuses me.

Is SSO only necessary for logging into JForum? Or can this be handled completely via HTTP requests as page 4582 shows? And can this be done without a cookie?

Could logging out from JForum be handled by Tomcat closing down user sessions after so long anyway using the setting in Web.xml?

Thanks

Martin O'Shea.
[originally posted on jforum.net by MartinOShea]