Win a copy of The Little Book of Impediments (e-book only) this week in the Agile and Other Processes forum!
  • Post Reply
  • Bookmark Topic Watch Topic
  • New Topic

SCEA 5/1- JAAS question

 
Steven Colley
Ranch Hand
Posts: 290
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Does JAAS (in Java 5 EE model) support or not SSO ?

tkkks in advance!
 
Farbod H Foomany
Ranch Hand
Posts: 63
 
Steven Colley
Ranch Hand
Posts: 290
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Hi farbod, these are excelent samples...took a look at some of them..but my question is simpler...

just want to understand if JAAS API itself does support SSO or not..... ( or is this accomplished by using SAML ? ).

Because I've already answered some mock exams which mention that JAAS does NOT support SSO...and after that I ready and responded other ones which say that JAAS DOES support SSO.

got a little confused with.


Tks in advance!!!

tkks!
 
Jimmy Clark
Ranch Hand
Posts: 2187
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
The Java Authentication and Authorization Service API can certainly be used to implement single sign-on functionality. The correct answer to a question about whether this API supports single sign-on functionality is yes.
 
Steven Colley
Ranch Hand
Posts: 290
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
OK, tks James!!
 
Farbod H Foomany
Ranch Hand
Posts: 63
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Hi,
I agree with both YES and NO I am not sure SSO is an out of the box option. but 'supports' ? yes it supports.
Look at so many products that have implemented SSO, oracle JSSO for example and identity management.
It seems that SSO is not a requirement for JEE compatible application server. But easy to implement using Krb5LoginModule.
SAML facilitates SSO for web services. SSO's Kerberos tokens are a bit different from SAML tokens.
Regards
Farbod

P.S. I was thinking to myself if I were supposed to go to heaven or hell based on this answer, which one I would choose. I think I would linger there forever!
[ May 07, 2008: Message edited by: Farbod H Foomany ]
 
Steven Colley
Ranch Hand
Posts: 290
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Originally posted by Farbod H Foomany:
[QB]Hi,
I agree with both YES and NO I am not sure SSO is an out of the box option. but 'supports' ? yes it supports.
Look at so many products that have implemented SSO, oracle JSSO for example and identity management.
It seems that SSO is not a requirement for JEE compatible application server. But easy to implement using Krb5LoginModule.
SAML facilitates SSO for web services. SSO's Kerberos tokens are a bit different from SAML tokens.
Regards
Farbod


No..that's fine Farbod..

It makes sense! In short then :

JAAS DOES support SSO.
SSO easy to be implemented by JAAS using kerberos.
SAML = SSO for web services.
SSO is not a requirement for JEE compatible application server.

anything else?

tks!!
 
  • Post Reply
  • Bookmark Topic Watch Topic
  • New Topic