java - How to Implement SSO on existing tomcat web application -

java - How to Implement SSO on existing tomcat web application -

i have tomcat 7 setup oldapp.war , newapp.war deployed on it. both applications share same login credentials users on database.

i can access apps using https://localhost/oldapp , https:localhost/newapp respectively.

my oldapp spring mvc java application , when user logged oldapp want have link take user newapp without asking login credentials.

i want know how implement sso this. preferably don't want run external service handle this.

thanks in advance.

you can implement sso in many different ways:

oauth 2 - http://oauth.net/2/ saml 2 - https://www.oasis-open.org/committees/tc_home.php?wg_abbrev=security

saml 2.0 has many implementations identity/service provider roles.

for idp implementations list can point stackoverflow post: http://stackoverflow.com/a/761774/126414

if planning implement service provider there nice spring extension: http://static.springsource.org/spring-security/site/extensions/saml/index.html

java spring tomcat7 single-sign-on