Portal / Active Directory / Single Sign-On Bit confused?

[jvitor]

Hello everyone,

I could use some tips regarding JBoss Portal and single sign-on, heres the situation:

My company wants to migrate to JBoss Portal and integrate it with Microsoft Active Directory.
They also have an important Java Web Application (running on JBoss AS) with a big user database, which they also want to integrate with Microsoft AD.

My questions are:

1 - How can i obtain a single sign-on behaviour for both the JBoss Portal and the Java Application, having the portal as the entry point for the user and Microsoft AD dealing with authentication and authorization for the users?

2 - After the user is logged on the Portal, how is that "authentication token" transmited to other applications via AD?

Thanks in advance for any help :)

[jvitor]

Anyone? :]

[esmith1]

With the assumption you will deploy both your "important Java Web Application" and the JBoss Portal under the same JBoss AS, then you may be able to leverage the Tomcat Valve, setup described here http://docs.jboss.com/jbportal/v2.6.4/referenceGuide/html_single/#d0e9623 which will allow either context/site to do the initial prompting and authentication, after which if the user points the same browser window to the "other" site it will be automatically logged in (by the tomcat single sign on valve).

If you can not deploy them under the same JBoss AS instance (for instance you need different ports) then you can consider some of the other SSO solutions like http://www.josso.org for which the setup is also documented in the ref guide.

As a separate issue, to change the Portal sign-on behavior to use Active Directory (http://en.wikipedia.org/wiki/Active_Directory), since it is an LDAP you can follow the steps here http://docs.jboss.com/jbportal/v2.6.4/referenceGuide/html_single/#d0e8723.