Hitachi

uCosminexus Application Server Security Management Guide


5.5.1 Necessary procedures for single sign-on

To use single sign-on, WebSSOLoginModule is required to invoke all the custom login modules that use single sign-on and the Cosminexus standard login modules (login modules that authenticate users).

jaas.conf (the JAAS configuration file) is used to enable single sign-on.

In the following example, WebPasswordLoginModule is used to authentication users.

AP1 {
  com.cosminexus.admin.auth.login.WebPasswordLoginModule Requisite
    com.cosminexus.admin.auth.ldap.r="3"
    com.cosminexus.admin.auth.ldap.w="2"
    com.cosminexus.admin.auth.realm=XXXcompany;
};

To use single sign-on, change the code shown in the preceding example as that is indicated in bold type and has a background color in the following example:

AP1 {
  com.cosminexus.admin.auth.sso.login.WebSSOLoginModule Requisite
    com.cosminexus.admin.auth.ldap.r="3"
    com.cosminexus.admin.auth.ldap.w="2"
    com.cosminexus.admin.auth.realm=XXXcompany;
};

The definition of all login modules for single sign-on is active after the above modification is made and after the J2EE server is started.