19.4. Use Single Sign On (SSO) In A Web Application

Prerequisites

• A configured security domain which handles authentication and access.
• The infinispan subsystem. By default, it is present in all the profiles for managed domain and standalone server.
• The web cache-container and SSO replicated-cache. The initial configuration files already contain the web cache-container, and some of the configurations already contain the SSO replicated-cache as well. Use the following commands to check for and enable the SSO replicated-cache. Note that these commands modify the ha profile of a managed domain. You can change the commands to use a different profile, or remove the /profile=ha portion of the command, for a standalone server.

  Example 19.1. Check for the web cache-container

  The profiles and configurations mentioned above include the web cache-container by default. Use the following command to verify its presence. If you use a different profile, substitute its name instead of ha.

  /profile=ha/subsystem=infinispan/cache-container=web/:read-resource(recursive=false,proxies=false,include-runtime=false,include-defaults=true)

  If the result is success the subsystem is present. Otherwise, you need to add it.

  Example 19.2. Add the web cache-container

  Use the following three commands to enable the web cache-container to your configuration. Modify the name of the profile as appropriate, as well as the other parameters. The parameters here are the ones used in a default configuration.

  /profile=ha/subsystem=infinispan/cache-container=web:add(aliases=["standard-session-cache"],default-cache="repl",module="org.jboss.as.clustering.web.infinispan")

  /profile=ha/subsystem=infinispan/cache-container=web/transport=TRANSPORT:add(lock-timeout=60000)

  /profile=ha/subsystem=infinispan/cache-container=web/replicated-cache=repl:add(mode="ASYNC",batching=true)

  Example 19.3. Check for the SSO replicated-cache

  Run the following Management CLI command:

  /profile=ha/subsystem=infinispan/cache-container=web/:read-resource(recursive=true,proxies=false,include-runtime=false,include-defaults=true)

  Look for output like the following: "sso" => {

  If you do not find it, the SSO replicated-cache is not present in your configuration.

  Example 19.4. Add the SSO replicated-cache

  /profile=ha/subsystem=infinispan/cache-container=web/replicated-cache=sso:add(mode="SYNC", batching=true)