uCosminexus Application Server, Security Management Guide

[Contents][Index][Back][Next]

5.5.1 Necessary procedures for single sign-on

To use single sign-on, WebSSOLoginModule is required to invoke all the custom login modules that use single sign-on and the Cosminexus standard login modules (login modules that authenticate users).

jaas.conf (the JAAS configuration file) is used to enable single sign-on.

In the following example, WebPasswordLoginModule is used to authentication users.

AP1 {
  com.cosminexus.admin.auth.login.WebPasswordLoginModule Requisite
    com.cosminexus.admin.auth.ldap.r="3"
    com.cosminexus.admin.auth.ldap.w="2"
    com.cosminexus.admin.auth.realm=XXXcompany;
};
 

To apply single sign-on, modify the statement as shown in bold below.

AP1 {
  com.cosminexus.admin.auth.sso.login.WebSSOLoginModule Requisite
    com.cosminexus.admin.auth.ldap.r="3"
    com.cosminexus.admin.auth.ldap.w="2"
    com.cosminexus.admin.auth.realm=XXXcompany;
};
 

The definition of all login modules for single sign-on is active after the above modification is made and after the J2EE server is started.