Just for the sake of shooting from the hip every now and then, why don't you
allow 
sessions to be shared among applications? (I mean http sessions) That works
when switching
from http to https...

JP

-----Original Message-----
From: Nick Newman [mailto:[EMAIL PROTECTED]]
Sent: Martes, 16 de Enero de 2001 14:52
To: Orion-Interest
Subject: RE: Single Sign On


Hi,

We had a similar problem.  The solution we came up with was to use BASIC 
authentication for all the relevant web-apps, and to specify the same 
<realm-name> for each web-app.  That way, the browser supplies the required 
logins as you switch between web-apps.

Yes, it would be nicer to use FORM based login, but so far as we could tell 
(with some help from the orion folk) this does not work with SSO.  They 
(orion) indicated that certificate based security was a better fit for SSO, 
as I recall.

Nick

At 09:53 AM 1/16/01 +0000, you wrote:
>Gerald,
>
>Did you ever get any direct replies to this SSO query ?  We are trying to
do
>the same.  Maybe we could work together in some way ?
>
>Kind regards,
>Tony.
>
>
>-----Original Message-----
>From: [EMAIL PROTECTED]
>[mailto:[EMAIL PROTECTED]]On Behalf Of Gerald
>Gutierrez
>Sent: 02 December 2000 20:09
>To: Orion-Interest
>Subject: Single Sign On
>
>
>
>Does Orion do any sort of single sign-on for multiple applications deployed
>on the same application server? If so, how can one get this working?
>
>


Reply via email to