So run this by me

[acoliver]

If I have:

mywebapp.war ->FlashApp

myapp.ear

FlashApp calls down the already authenticated HTTPS stream provided by the browser to mywebapp.war to JBossWS services in myapp.ear.  Flash does not have WS-Trust support itself though.

I seems like I want a pattern a bit different than the picketlink-trust jar provides.  It seems like I basically want an endpoint that does the exact same thing as the the org.picketlink.identity.federation.bindings.tomcat.sp.SPPostFormAuthenticator does or that I just really want tomcat style SSO..?

It does not bother me if a new assertion is created from the myapp.ear....  It would be preferable to me to get the roles the same way or am I missing something critical here?

-Andy

[acoliver]

So... I think the answer is that I have to write my own endpoint as the one that is there isn't going to work this way.  I basically need something that will re-authenticate the browser...

-Andy

[anil.saldhana]

Andy, you lost me at "Flash".

[acoliver]

Cute...but if everyone picked one vendor then there would be no need for picketlink....oh and it would be micorosoft...and we'd all be broke (including/especially the customers).

[anil.saldhana]

Andy, the MS guys can just drive down to the Adobe campus.