Java/J2ee Authentication through Window login

Question

Can anyone please tell me how to do user authentication through windows corporate domain login id and password... so if the user is already logged in, the application should not ask for username and password.

Whole Scenario: We have a web application that anyone can access.. if you are outside from the company network- do SSO through saml.

If user is on company premises- do the authentication through the machine's username and password.

I hope you got my point.. please let me know if you have any doubt.. Note : Webapplication is developed in Java... so solution should be in java.

Answer 1

This Oracle tutorial explains which APIs to use and how. Essentially you need a Java Kerberos integration point. Apache Tomcat has one (if you want to look at how they do it, go here).

Google also led me to this project which might help you.

Lastly have a look at Java SSO: Kerberos authentication against Active Directory.