• Post Reply Bookmark Topic Watch Topic
  • New Topic

Seeking suggestions for single signon solution  RSS feed

 
Michael Arnett
Ranch Hand
Posts: 65
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Say that 5 times fast....
Hi all,
I am completely new to Web Services and was wondering if anyone had input on a single signon solution. Basically, its a pretty straightforward situation. The user could login to one web site and then have logged in access to additional web sites (similar to a MS Passport scenario). The requirements are still pretty general; so those are the only details I currently know. I would be interested in hearing about both exclusively java solutions ( ie all web applications are built with Java ) and heterogeneous solutions ( ie some web applications are built in Java, others ASP or Cold Fusion, etc.). Whenever I do settle on something, I'll post my solution for those who might have similar issues in the future.
Thanks in advance,
-MLA
 
Kyle Brown
author
Ranch Hand
Posts: 3892
5
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
So do Web Services enter in to this at all? Or are you just looking for a generic single-signon solution for Java and not Java web applications?
Kyle
 
Michael Arnett
Ranch Hand
Posts: 65
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Kyle,
Thanks for the response. I was thinking that one possible solution would be to use a web service as the user/password validator for all relevant web applications. Does this make sense? I'm not sure I understand what you mean by 'a generic single signon for Java not Java web applications'. Perhaps I am misunderstanding something about web services. Any help would of course be appreciated. Thanks in advance...
-MLA
 
Kyle Brown
author
Ranch Hand
Posts: 3892
5
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
It's a typo, I meant "Java AND non-Java". My opinion is that Web Services aren't right for this -- why would you want to reinvent the wheel? There are dozens of commercial products like Tivoli Access Manager, eTrust, etc. that do single-signon across different app servers and non-Java products like IIS and .NET. IMHO, you should buy middleware -- not write it...
Kyle
 
  • Post Reply Bookmark Topic Watch Topic
  • New Topic
Boost this thread!