Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Migrated to Confluence 5.3

Integrated Windows Authentication (IWA) is a popular authentication mechanism that is used to authenticate users in Microsoft Windows servers. WSO2 Identity Server provides support for IWA from version 4.0.0 onwards. This section gives an introduction to IWA authentication, how it works, how to use it. The following topics cover all these items:

Table of Contents

See here to enable IWA in the WSO2 Identity Server.

...

IWA was initially developed by Microsoft as an authentication mechanism for their .NET based IIS servers. However, neither Java nor the server applications that host Java web applications (like Tomcat) have native support for IWA. There are several third party libraries which provide the ability of enabling the IWA for the Java web applications. Here are some of those libraries:

  • JCIFS – JCIFS is an open source library that had been commonly used few years ago for IWA authentication of Java web applications. However this library is no longer maintained and it is not recommended to use because of security flaws.
  • JESPA – JESPA is a commercial library that can be used to enable IWA in Java web applications.
  • Tomcat IWA – This is tomcat's implementation of IWA. However this is not fully completed yet.
  • SPENGO – SPENGO is an open source library. It uses Java Authentication and Authorization Service (JAAS) for the authentication.
  • WAFFLE – WAFFLE is also an open source library. It can be configured easily to use with the Java web applications.

...