Windows Authentication

Recommended: SPNEGO filter

Installation part 1

1. Run pre flight checklist
2. Run installation

Troubleshooting

• Check Tomcat is running in the same context as the domain user
• Ensure only one SPN exists (with fully qualified name)

Installation part 2

Install the SPNEGO filter on the application

1. Copy filter setting from the guide to <TempusServaApplication>\WEB-INF\web.xml
2. Change the filter mapping from *.jsp to the login page

  <filter-mapping>
      <filter-name>SpnegoHttpFilter</filter-name>
      <url-pattern>/login</url-pattern>
  </filter-mapping>

Configure TempusServa to accept SSO by changing system configuration

  ssoSpnegoAuthenticate = true

Finally restart Tomcat

Testing the setup

Find a suitable user

• Must exist as a Domain User in the AD server (ex. "TESTDOMAIN\DrStrangelove" )
• Must exist as a user in Tempus Serva (ex. "DrStrangelove")

Other methods

• Waffle
• Tomcat 7 native SPNEGO