Java using Httpurlconnection for single sign-on

I am creating an application designed to handle single sign-on to remote applications. Unfortunately, other systems cannot work with any SSO libraries, so I will need to do a login. I am wondering if I can use something like Httpurlconnection to solve this problem for me? I am under the impression that this will register the server with the remote application, but will not register the client user with the system. Does anyone know about this?

I am currently doing something like this, but it is a security risk exposing passwords in html.

<form name="LoginForm" action="http://support.mydomainname.co/index.php?/Base/User/Login" method="post" target="_blank">
    <input type="hidden" name="scemail" value="${programCompany.username}"/>
    <input type="hidden" name="scpassword" value="${programCompany.password}"/>
    <input type="submit" value="Launch" class="btn btn-primary"/>
</form>

      

If my thoughts are correct, are we getting the server session and not the browser? If this is true, is there a way to pass the session to the browser?

+3


source to share





All Articles