It is necessary to implement SSO, preferably through OAuth 2, can someone throw sensible articles / examples, what he found, with almost no comments.

1 answer 1

Alternatively, you can use CAS (as already indicated) or Gluu.

CAS does not provide the ability to manage users, for this you need to use an additional web service to manage the user database.

You can implement SSO for example using Spring. As an authentication mechanism, use OpenID Connect Basic (OAuth 2.0 extension for authentication, you can find out more here ). It is easily implemented using Spring Security OAuth . On the server side of SSO, use the settings of the authorization service; on the client side, redefine the Spring Security filtering chain (for example ). Next, just implement OpenID Connect Basic.

Separately, I note that in the case of using the Authorization Code Grant stream in OAuth 2.0, you can not use the ID Token described in the mechanism. This is particularly mentioned by Ryan Boyd in this book.

A more complete description of this kind of implementation can be found here:

Article

Implementation

  • It is better to transfer the basic information from the links here, since if the links become invalid, the answer will be useless. Links can be as an addition. - Flowneee
  • Reasonably, made additional information. - Vladislav Tankov