I have two web applications that live on different web servers but if you’re authenticated in web app A then the user should also be authenticated in web app B. The inverse is not true, web app A is the “master” authenticator. So its basically single sign on. I have setup Spring Security on app B, but app A will not have Spring configured since its out of my control. Anyone have any ideas on what app A can send to the Spring based app B in order to tell that a user is authenticated in app A? It doesn’t have to be a Spring solution but must be java based. Thanks for the help!
Share
If both applications use spring, the simplest way is to use its http invoker mechanism, and exchange some tokens. What will these tokens be exactly depends on your needs. You can use SSL + a client certificate, or you can use OAuth, or a simple authentication (still over ssl).