It's correct that Fediz is a federated security solution based on the OASIS 
standard but not only. In simple deployment, it's an SSO solution for your web 
applications within your company. It has the benefit that the applications 
doesn't have to run in the same tomcat instance which gives you flexibility in 
hosting, clustering, etc.

But this really comes down to your requirements and future plans of your 
applications.

________________________________________
From: [email protected] [[email protected]] on 
behalf of ccleve [[email protected]]
Sent: 28 March 2013 02:21
To: [email protected]
Subject: Re: [jetty-users] Single Sign On Across Webapps

This is a custom solution, but when the user signs in you could add a
cookie that encrypts a username, password, and timestamp. When the user
hits a new webapp see if the cookie is present. If so decrypt it and log
the user into the new webapp automatically.



On 3/27/2013 1:41 PM, Ratay, Steve wrote:
> Oli,
>
> Fediz seems more like a federated security solution, similar to CAS or
> Shibboleth.  Ideally I’d like to solve this problem with a solution
> similar to what Tomcat has, where I don’t have to deploy another web
> application, another container, or manage SSL keys.
>
> Anyone else have other suggestions?
>
> Thanks, Steve
>
>
>
> _______________________________________________
> jetty-users mailing list
> [email protected]
> https://dev.eclipse.org/mailman/listinfo/jetty-users
>


_______________________________________________
jetty-users mailing list
[email protected]
https://dev.eclipse.org/mailman/listinfo/jetty-users
_______________________________________________
jetty-users mailing list
[email protected]
https://dev.eclipse.org/mailman/listinfo/jetty-users

Reply via email to