SSO between liferay and another standalone application

[Rajesh Chaurasia, modificado hace 11 años.]

Hi

I want to know how i can implement sso between a liferay application and another aplication out of context ie the two are disparate systems.My scenarionis :
1.login to liferay
2.go to a page in liferay portal where there is alink to invoke the other strandalone application ur say https://cnu.bapl.com/myphone
3.a fully authenticated user clicks on link inside liferay and then user should be able to enter the other application without having to specify credentials.

Can some body help ?

Can I use url rewriting in this or do i have to use cookie based logic ?I dont prefer cookei based logic as if i have to write multiple webapps in that stanadalone application,i will have write cooked based login everytime.

[Juan Gonzalez P, modificado hace 11 años.]

Probably CAS SSO is what you're looking for....

[Rajesh Chaurasia, modificado hace 11 años.]

Yes , can you provide me an analysis for this

[Milen Dyankov, modificado hace 11 años.]

These links may help:
- http://www.jasig.org/cas
- http://www.liferay.com/documentation/liferay-portal/6.1/user-guide/-/ai/cas

[Rashmi Rajappa, modificado hace 11 años.]

As far as i understand out-of-the box SSO features provided in liferay are means by which you can do an SSO from an external application to Liferay. You see where i am alluding at here right.

Bottom line is, I think you need to analyze what kind of capabilities for Single Sign On does the other system have, the one to which you are trying to do a SSO.
There are many ways to accomplish this as in via CAS, NTLM or even a simple HTTP/POST with SAML token.

[Jader Francia, modificado hace 11 años.]

You can also use a jsp bridge if users and passwords of two systems are the same.
Via hook plugin you can deploy in LR main webapp a jsp that can post user and password to second system via post / get simulating user's login.
It's not a secure solution but in a intranet environment I can think it's acceptable.
After deployed the jsp your link must open it and, o ononload event, the post / get is submitted to the second system.

My 2 cent! ;)

Cheers, J.

[Hitoshi Ozawa, modificado hace 11 años.]

Liferay CE supports OpenSSO out of the box and there is a SAML plugin available for EE users.
We currently have several systems operating with OpenSSO and proprietary SSO without any problems.