[This thread was moved from Spring Security Forum]
Hello,
I consider following architecture: web application running on Tomcat 6, users are authenticated and authorized through Spring Security 3 and CAS (Central Authentication Service). From web application users call remotely standalone application through Spring Integration 2 and JMS broker. I want such calls to be authenticated and authorized by CAS too.
My questions are:
1. Is there such architecture possible? If yes,
2. How to pass user credentials (or security context) to remote application?
3. How should be Spring Security filter chain configured there?
Thanks for any opinion,
Vladimir


Reply With Quote