Single Sign On (SSO) Using Spnego

   We have successfully implemented SSO integration using Spnego with Liferay. Spnego SSO is used for authenticating the user to liferay. SSO automatically signs the user to the liferay portal by using the windows principlal.

lmplementation Success using Liferay

• Added the necessary spnego jar which will communicate to the kebros to fetch the principal name from window.

• The liferay url is intercepted to check if the user is signed in or not using a filter, if the user is not signed the filter detects it and gets the user principal name form the spnego.

• The Autologin class attempts to check if the user already present in the db, if already present if will login automatically with the fetched user details from db.

• If the user is not present in the liferay db for the specified principal name, the user is created in the liferay. And login the user automatically.

• Logout will signout from the liferay and to login again we can close the browser and it will log in automatically.