<jsso> - single sign on project
Description
Working:
The JSSO are the Single Sign On application totaly web based, but this dos not significate that only web application can use.
JSSO is very simple and roboust system, the pre-requisite is only one EJB Conteiner and a Servlet Conteiner. If you have a Application Server, certainly you have this two requirements.

Users

Type Access access


Client-Server Access

For Client-Server access we have 2 simple ways to obtain the connection or verify user data. First with non-java system, and another with java based application. This two ways have two connection type, with or without security features.

Client-Server Access - Non-Java App
This type, the client generally is a .exe program, or somethink like this. The client can estabilish connection with JSSO by WebService, directly with the WebServer. This dont have any protection, the request are post to server, text clean (XML).

Look Figure 1 - without security

The second, can estabilish a connection with JSSO with a "tunnel" client application. this guarantee the security between client application and the JSSO Server. Flow:
1 - The client (.exe) make used the Java application, in the graph called "Tunnel".
2 - The tunnel make the data unread for people and send the information to JSSO Server
3 - The JSSO Server makes the data readable, and process the information passed.
4 - The JSSO Server return the information to Tunnel
5 - Tunnel application print the information received into console.

Look into Figure 1 - with security.

Client-Server access - Non-Java Application
Figure 1 show how client-server non java based application access the JSSO.
Client-Server Access - Java App
For connection from Java Application to JSSO Server is necessary only that the application use the client-lib for JSSO and, with this library the application can decide if will make secure connection via WebService or clear WebService or Direct Acces with EJB Component.

Look Figure 2.

Client-Server access - Java Application
Figure 2 show how client-server java based application access the JSSO.

Web Application Access

Web Application access - Non-Java Application
Figure 3 show how web application non java based access the JSSO.
Web Application access - Java Application
Figure 4 show how web application java based access the JSSO.

Download
jsso downloads


SourceForge.net Logo