I've been working on getting a Central Authentication Service (CAS) server up. This server allows all your web applications to have Single Sign On (SSO). The service itself can run on any JSP container. We are using Tomcat. Each web application needs to be secured using a CAS client. If you are using JEE or JSP CAS comes with some nice filters thatmake the sucuring pretty much invisible to the application. As we use WebObjects and PHP we need to do some of our own plumbing.
