java - Tomcat Container Managed SSO Valve and Spring Security -
we have on dozen legacy web applications (each own app contexts) use tomcat's container managed security simple form-based authentication. use tomcat's single sign on valve allow authenticated users jump between web apps without need of re-authenticating. developing new web applications using spring security framework.
is possible users authenticated via new spring security apps able jump older legacy (non-spring) apps without need of re-authenticating? way bridge spring security tomcat sso valve?
i prefer avoid making changes legacy web apps, understand if doesn't seem possible.
you able using j2eepreauthenticatedprocessingfilter: http://static.springsource.org/spring-security/site/docs/3.2.x/reference/htmlsingle/#d4e2766
please note: when tomcat sso configured provides java ee authentication web application. means application transparent if authenticated form authentication or tomcat sso. java ee authentication. so, need use j2eepreauthenticatedprocessingfilter able use java ee authentication provided tomcat.
Comments
Post a Comment