Re: [jetty-users] Single Sign On Across Webapps

[Oliver Wulff <owulff@xxxxxxxxxx>]

It's correct that Fediz is a federated security solution based on the OASIS standard but not only. In simple deployment, it's an SSO solution for your web applications within your company. It has the benefit that the applications doesn't have to run in the same tomcat instance which gives you flexibility in hosting, clustering, etc.

But this really comes down to your requirements and future plans of your applications.

________________________________________
From: jetty-users-bounces@xxxxxxxxxxx [jetty-users-bounces@xxxxxxxxxxx] on behalf of ccleve [ccleve.tech@xxxxxxxxx]
Sent: 28 March 2013 02:21
To: jetty-users@xxxxxxxxxxx
Subject: Re: [jetty-users] Single Sign On Across Webapps

This is a custom solution, but when the user signs in you could add a
cookie that encrypts a username, password, and timestamp. When the user
hits a new webapp see if the cookie is present. If so decrypt it and log
the user into the new webapp automatically.



On 3/27/2013 1:41 PM, Ratay, Steve wrote:
> Oli,
>
> Fediz seems more like a federated security solution, similar to CAS or
> Shibboleth.  Ideally I’d like to solve this problem with a solution
> similar to what Tomcat has, where I don’t have to deploy another web
> application, another container, or manage SSL keys.
>
> Anyone else have other suggestions?
>
> Thanks, Steve
>
>
>
> _______________________________________________
> jetty-users mailing list
> jetty-users@xxxxxxxxxxx
> https://dev.eclipse.org/mailman/listinfo/jetty-users
>


_______________________________________________
jetty-users mailing list
jetty-users@xxxxxxxxxxx
https://dev.eclipse.org/mailman/listinfo/jetty-users