On 1/27/11 3:57 PM, beau.hutche...@thomsonreuters.com wrote: > Chris: > Thanks for your reply. > Currently I am using Tomcat 6.0.29 > > @Pid: Would you have any ideas on how to set something up like this?
What details are you providing to Tomcat? If I read the thread correctly you've got a single parameter - how are you validating that to stop say, me, guessing at logins? p > Beau > > -----Original Message----- > From: Christopher Schultz [mailto:ch...@christopherschultz.net] > Sent: Wednesday, January 26, 2011 6:30 PM > To: Tomcat Users List > Subject: Re: Tomcat Form Authentication that requires no password for > third party SSO > > Beau, > > On 1/26/2011 1:10 PM, beau.hutche...@thomsonreuters.com wrote: >> I am trying to integrate my application with an SSO partner > application. > > What Tomcat version? I ask because Tomcat 7 includes the Servlet 3.0 > programmatic login API. > >> After successfully logging into the partner app, I will be redirected >> and only provided a username to log into my tomcat Form Authentication >> app. I am using a DataSourceRealm to check for both Users and User >> Roles. > > DataSourceRealm requires both username and password. I think JAASRealm > might be able to help you. Also, one of the list contributors (Pid) is > working on a realm to help with OpenSSO or something like that: he may > have some ideas about how to set things up. > >> Are there any suggestions as to how I can still authenticate() through >> the tomcat container without providing a password? > > Out of the box, I don't believe Tomcat can do this. > > -chris --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
0x62590808.asc
Description: application/pgp-keys
signature.asc
Description: OpenPGP digital signature