Using Identity Assertion
Typically to support an SSO process, you need to have a LoginModule object and an Identity Assertion provider. With these objects, you can exploit tokens stored by the operating system to do the HTTP authorization process without entering username and password and gain access to your secure resources.
The LoginModule objects trust that the user has obtained the token by providing the username and password to another authority.
Your token can pass from client to server in different ways such as HTTP headers, cookies, SSL certificates, or other custom mechanisms. The Identity Assertion needs to grab this token and extract the security information to allow access to the secured context paths.
We will be using the SPNEGO Identity ...
Get Securing WebLogic Server 12c now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
