Tag: Application Security

Introduction to Public Key Encryption for Managers

In this first article of a series I’m going to start by explaining a little bit about Public Key encryption which is one of the fundamental building blocks of SSL.

SAML Single Sign on With JBoss Wildfly and Picketlink

Following on from my previous article about configuring SAML SSO with Tomcat and Picketlink this time I will show you how to do the same thing with JBoss Wildfly.

Kerberos User Impersonation on Tomcat with Apache

If you are using Kerberos for single sign-on SSO and want to be able to make http requests impersonating the end user to third party systems you can do this using the HttpClient that is part of the Apache HttpComponents project.

SAML Single Sign-On with Tomcat and PicketLink

In this article I’ll give you an introduction to SAML Web Browser Single Sign On Profile using POST and how to configure it in Tomcat.

Configuring Tomcat 7 Single Sign-on with SPNEGO (Kerberos & LDAP) Part 2

In this recipe you will see how to configure authentication cross forest and how you might implement cross forest authorization.

Configuring Tomcat Single Sign-on with SPNEGO (Kerberos & LDAP)

So what is SPNEGO? SPNEGO stands for Simple and Protected GSSAPI Negotiation Mechanism (SPNEGO). It is a mechanism by which an authenticating body negotiates with the authenticator what security protocol to use, for example Kerberos, NTLM, Digest or Basic