I have asked before about ejb security propagation in Jboss 7.1.1 Final. In my scenario I have a custom security domain and login module to authenticate my users, with LDAP and database. On the other hand, I have many ears with secured ejbs that are consumed by other applications via ejb remote calls. In order to scale I would like to use this applications in different server instances. I had no problems using JBoss 5.1.0.GA, but i could not make it work in JBoss 7.1.1.Final.
As far as I know there is a feature request [#WFLY-483] Allow more control over authentication for server to server communication through remote-outbound-connection… to make it work, but it is targeting Wildfly 8.0.0.CR1.
My question is, exist any other way, maybe using third party solutions, to enable a kind of Single Sign On in EJB system? I mean authenticating to a enterprise application (for example a webapp) and propagating the principal and roles through different ejb/web applications in different server instances of JBoss 7.1.1.Final?
if my problem was unclear I would explain
Thanks!
Eduardo
