LDAP web application using Single sign-on authentication

0
votes

I am developing a LDAP web application to access windows active directory contents. I am new to LDAP and single sign-on authentication. At first step, I have developed log in service using "unboundid" java sdk, but now I want to change it to work with single sign-on or open-id authentication. Could any one suggest me solutions/resources for how to perform user authentication of LDAP web application using single sign-on mechanism?

I have gone through some posts out there on internet, but all they are related to open-id authentication using LDAP server. No one has mentioned how to do it for LDAP web application. Thanks in advance for your suggestions!!

1
authenticationldapopenidsingle-sign-on

1 Answers

1
votes

LDAP (or any auth abomination formed with it) won't provide you with true SSO (Single Sign On), you will need to implement it using the WWW-Authenticate header and negotiating for kerberos.

This is one idea that will work with an existing AD Server.

Here is an excellent question regarding authentication