Win a copy of Java Challengers this week in the Java in General forum!
  • Post Reply Bookmark Topic Watch Topic
  • New Topic
programming forums Java Mobile Certification Databases Caching Books Engineering Micro Controllers OS Languages Paradigms IDEs Build Tools Frameworks Application Servers Open Source This Site Careers Other Pie Elite all forums
this forum made possible by our volunteer staff, including ...
Marshals:
  • Campbell Ritchie
  • Paul Clapham
  • Ron McLeod
  • paul wheaton
  • Devaka Cooray
Sheriffs:
  • Jeanne Boyarsky
  • Tim Cooke
  • Liutauras Vilda
Saloon Keepers:
  • Tim Moores
  • Tim Holloway
  • Stephan van Hulst
  • Carey Brown
  • Piet Souris
Bartenders:
  • salvin francis
  • Mikalai Zaikin
  • Himai Minh

Single Sign On

 
Ranch Hand
Posts: 30
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
Dear Friends,


I have to do one task where user login in one application and there is one href link is provide, when user click on the link I have to take him into another application without authentication .i.e. without asking for username and password using post method and nothing should be caught in burb or sniffer not even encripted username and password. Suppose there are two application A installed on windows (JBoss server) and another on linux server.

How to create single sign on, application server on both side is JBoss. Below are my findings I can pass the username and password to application B but how to open the browser with login.

------------

 
Bartender
Posts: 1558
5
Eclipse IDE Java Linux
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
Welcome to CodeRanch!

Please, UseCodeTags.

Also, please CarefullyChooseOneForum.

Thanks.
 
Ranch Hand
Posts: 163
Eclipse IDE Tomcat Server Java
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
Dinesh,

Passing the username and password through the URL is not safe.

I too, am researching SSO methods. There are several options but JOSSO appears
to be straightforward. I've yet to try it.
 
Dinesh Pise
Ranch Hand
Posts: 30
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
Hi Friends,

First of all Bill Clar thank you for the reply.

With the below HttpClient code I am able to send the data to another application and I can get the parameter but one question is how to open the application in browser after successful authentication.


[/code]
 
Rancher
Posts: 43024
76
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
The 4 major Java open source SSO solutions are mentioned in https://coderanch.com/how-to/java/SecurityFaq#web-apps
 
Greenhorn
Posts: 13
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
CAS is a very popular SSO project.

It is easily configularable and maintainable.

See This Link
reply
    Bookmark Topic Watch Topic
  • New Topic