Apache Shiro and SSO

问题

Apache Shiro is a Java security framework and support SSO. And I have multiple sub-domains, each of which has separate application running. How can I use Apache Shiro web filters(or any other) to provide single sign on.

Should I need a SSO server or service (like CAS?) before I use Apache Shiro ? Or Apache Shiro do not need SSO server or service (like CAS) ?

Thanks

回答1:

I am not Shiro expert, but I will try to help you.
According to my understanding Shiro does not provide SSO service out of the box. You need to use CAS filter as SSO service. Please look the following page that explain you how to define Shiro CasFilter: http://shiro.apache.org/cas.html

来源：https://stackoverflow.com/questions/15597274/apache-shiro-and-sso