Search code examples
webspherewindows-authentication

Does WebSphere 7 support Integrated Windows Authentication?

Is Integrated Windows Authentication available in WebSphere (7)?

Specifically, how is it possible to obtain the username and group memberships of the user accessing a web application via a IE?

Solution

  • SPNEGO is supported on was7 see Creating a single sign-on for HTTP requests using SPNEGO Web authentication

    As specified in the doc:

    The requester's identity in the WebSphere Application Server security registry must be identical to the identity that the SPNEGO web authentication retrieves. An identical match does occur when Microsoft Windows Active Directory server is the Lightweight Directory Access Protocol (LDAP) server that is used in WebSphere Application Server.

    Which means that HttpServletRequest.getRemoteUser() will return you the actual username.

    You can perform ldap operations through jndi see JNDI as an LDAP API However I would prefer mapping groups to roles to determine group membership.