Authenticate How to authenticate user without passwordthat is provided by a Single Sign On (SSO) proxy.
We've got a SSO-Proxy for most of our web applications. I'd like to make use of the SSO-Proxy instead of requiring the user to login with his Windows credentials.
I've figured out how I can read the HTTP header containing the user-id. Now I'd like to authenticate as this user, but all provided methods require a password. Is there anyway I can authenticate a user only by his user-id?
This is what I've got to get the user-id:
package ch.company.ivy.security;
import java.util.Map;
import javax.faces.context.FacesContext;
public class Auth {
Map<String, String> headers;
String userId;
public Auth() {
headers = FacesContext.getCurrentInstance().getExternalContext().getRequestHeaderMap();
userId = headers.get("UID").toString();
}
public String getUserId() {
return this.userId;
}
}
