Windows Authentication

Recommended: SPNEGO filter

Installation part 1

1. Run pre flight checklist
2. Run installation

Troubleshooting

• Check Tomcat is running in the same context as the domain user
• Ensure only one SPN exists (with fully qualified name)

Installation part 2

Install the SPNEGO filter on the application

1. Copy filter setting from the guide to <TempusServaApplication>\WEB-INF\web.xml
2. Change the filter mapping from *.jsp to the login page

  <filter-mapping>
      <filter-name>SpnegoHttpFilter</filter-name>
      <url-pattern>/login</url-pattern>
  </filter-mapping>

Configure TempusServa to accept SSO by changing system configuration

  ssoSpnegoAuthenticate = true

Other methods

• Waffle
• Tomcat 7 native SPNEGO