Integrated Windows Authentication - Support

ckwan · January 15, 2021, 1:43am

Hi CUBA,

I’ve a requirement to integrate

Integrated Windows Authentication (IWA)

I’d like to seek your advise, what I could customize it?

Regards,
CK

arapoport · January 15, 2021, 2:23pm

albudarov · January 19, 2021, 6:37am

There is a GitHub - Waffle/waffle: Enable drop-in Windows Single Sign On for popular Java web servers. library I’ve heard of.
Haven’t used personally so I wouldn’t be able to consult you in detail about it.

ckwan · January 19, 2021, 6:58am

Hi Alex,

I have checked this article and also the SPNEGO.
I’m doing the testing. I will update the thread here

Once the testing success, I need to extend the login page controller to make use the IWA.

Regards,
CK

ckwan · January 20, 2021, 1:20pm

Hi,

Just to update the thread, I have managed to add SPNEGO IWA into CUBA.

Step 1 - Add SPNEGO jar into build.gradle
Step 2 - Add SPNEGO HTTP Filter inside web.xml of web module

If you are using single-war concept, you need programmatically add SPNEGO HTTP Filter

Step 2.1 - configure the parameters and setup follows

Step 3 - you can get your remote user name to continue login logic when you open the login screen.

PS: Tomcat Server’s per-auth user must be same domain with user that accessing the link

Regards,
CK