SSO of custom web app and ALBPM

Question

Hi
Recently we have to integrate a custom app and ALBPM on weblogic server,
we want to implement Single Sign On between the custom app and ALBPM workspace,
hopefully on application level
(our custom application is using acegi security backed by LDAP right now)
but seems the authentication of ALBPM is quite proprietary and tends to be container-managed.
could anyone can kindly tell me how should we get start on this?
Thanks

Answer 1

Hello guys,
someone knows how to implements "fuego.workspace.security.SSOWorkspaceLoginInterface" or find some API documentation, javadoc about this interface?
for now, Im try to find some help or documentation about SSO in workspace, So when I did decompilation to find more answers.
package fuego.workspace.security;
import fuego.sso.SSOLoginException;
import fuego.web.SSOUserLoginInterface;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
public interface SSOWorkspaceLoginInterface extends SSOUserLoginInterface {
     public abstract void setupAuthenticatedSession(
               HttpServletRequest httpservletrequest,
               HttpServletResponse httpservletresponse) throws SSOLoginException;
     public abstract void processRequest(HttpServletRequest httpservletrequest,
               HttpServletResponse httpservletresponse) throws SSOLoginException;
package fuego.web;
public interface SSOUserLoginInterface extends fuego.sso.SSOUserLoginInterface {
package fuego.sso;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
// Referenced classes of package fuego.sso:
//            SSOLoginException
public interface SSOUserLoginInterface {
     public abstract String getUser(HttpServletRequest httpservletrequest,
               HttpServletResponse httpservletresponse) throws SSOLoginException;
     public abstract String getPassword(HttpServletRequest httpservletrequest,
               HttpServletResponse httpservletresponse) throws SSOLoginException;
     public abstract boolean skipFDIAuthentication();
     public abstract String getLogoutURL();
     public abstract String getLogoutRelativePath();
}And I decompile fuego.workspace.security.SSOWorkspaceLogin to see the logic inside this classe
package fuego.workspace.security;
import fuego.sso.SSOLoginException;
import fuego.web.SSOUserLogin;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
// Referenced classes of package fuego.workspace.security:
//            SSOWorkspaceLoginInterface
public class SSOWorkspaceLogin extends SSOUserLogin implements
          SSOWorkspaceLoginInterface {
     public SSOWorkspaceLogin() {
     public void setupAuthenticatedSession(
               HttpServletRequest httpservletrequest,
               HttpServletResponse httpservletresponse) throws SSOLoginException {
     public void processRequest(HttpServletRequest httpservletrequest,
               HttpServletResponse httpservletresponse) throws SSOLoginException {
package fuego.web;
// Referenced classes of package fuego.web:
//            SSOUserLoginInterface
public class SSOUserLogin extends fuego.sso.SSOUserLogin implements
          SSOUserLoginInterface {
     public SSOUserLogin() {
}And here i think he uses some obfuscator, cause i cant decompile implementation method :(
package fuego.sso;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
// Referenced classes of package fuego.sso:
//            SSOUserLoginInterface, SSOLoginException
public class SSOUserLogin implements SSOUserLoginInterface {
     public SSOUserLogin() {
     public String getUser(HttpServletRequest request,
               HttpServletResponse response) throws SSOLoginException {
          /*  25*/return request.getRemoteUser();
     public String getPassword(HttpServletRequest request,
               HttpServletResponse response) throws SSOLoginException {
          /*  31*/return null;
     public boolean skipFDIAuthentication() {
          /*  36*/return true;
     public String getLogoutURL() {
          /*  41*/return null;
     public String getLogoutRelativePath() {
          /*  46*/return null;
}Thanks for any help or indication of source..
regards.