9

Apache Shiro is a Java security framework and support SSO. And I have multiple sub-domains, each of which has separate application running. How can I use Apache Shiro web filters(or any other) to provide single sign on.

Should I need a SSO server or service (like CAS?) before I use Apache Shiro ? Or Apache Shiro do not need SSO server or service (like CAS) ?

Thanks

Renan Ferreira
  • 2,122
  • 3
  • 21
  • 30

2 Answers2

5

I am not Shiro expert, but I will try to help you.
According to my understanding Shiro does not provide SSO service out of the box. You need to use CAS filter as SSO service. Please look the following page that explain you how to define Shiro CasFilter: http://shiro.apache.org/cas.html

Michael
  • 10,063
  • 18
  • 65
  • 104
0

For Shiro to support SSO, Cas is now deprecated, you need to use buji-pac4j library to support SSO using multiple protocols like SAML, OpenIdConnect, etc.

MukulChakane
  • 73
  • 2
  • 8