I am trying to add new functionality to a formerly built web application. The application uses j_security_check
. I want to use another single-sign-on service to log in to the application. What is the best practice for that?
P.S. I can't see where j_security_check
checks for the user name and password. Any help with that will be appreciated.
Edit: actually what i want to do is to use another sso service to login to j_security_check. the other SSO System is another we application. user logins to that application and that application post me a token. After it posts me the token I can get the user id of logged in person.
Thanks!