Apache Shiro and SSO

apache single-sign-on shiro
user1651520 picture user1651520 · Mar 24, 2013 · Viewed 8.2k times · Source

Apache Shiro is a Java security framework and support SSO. And I have multiple sub-domains, each of which has separate application running. How can I use Apache Shiro web filters(or any other) to provide single sign on.

Should I need a SSO server or service (like CAS?) before I use Apache Shiro ? Or Apache Shiro do not need SSO server or service (like CAS) ?

Thanks

Answer

Michael picture Michael · Mar 26, 2013

I am not Shiro expert, but I will try to help you.
According to my understanding Shiro does not provide SSO service out of the box. You need to use CAS filter as SSO service. Please look the following page that explain you how to define Shiro CasFilter: http://shiro.apache.org/cas.html

Related questions

Apache Config - Exclude Location from Authentication

I have a web application that is being protected by a Shibboleth authentication module. My current config is as below <Location /MyApp> AuthType shibboleth ShibUseHeaders On ShibRequestSetting requireSession 1 require shibboleth </Location> The shibboleth is an authentication …

Read More
Error message "Forbidden You don't have permission to access / on this server"

I have configured my Apache by myself and have tried to load phpMyAdmin on a virtual host, but I received: 403 Forbidden You don't have permission to access / on this server My httpd.conf # # This is the main Apache HTTP server …

Read More
XAMPP, Apache - Error: Apache shutdown unexpectedly

I've just re-installed XAMPP, and when I try to start my Apache server in the XAMPP Control Panel, I now get the following errors: 16:50:25 [Apache] Status change detected: running 16:50:26 [Apache] Status change detected: stopped 16:50:26 [Apache] Error: Apache shutdown unexpectedly. 16:50:26 [Apache] …

Read More