Stack Overflow
Stack Overflow

Questions tagged [ltpa]

LTPA - Lightweight Third-Party Authentication is a IBM provided mechanism to achieve Single Sign-On between IBM WebSphere servers and Lotus Domino servers. Once a user is successfully authenticated a LTPA token will be stored as a cookie in the user's web browser, providing who the authenticated user is to other servers in the same configured SSO domain.

LTPA - Lightweight Third-Party Authentication is a IBM provided mechanism to achieve Single Sign-On between IBM WebSphere servers and Lotus Domino servers. If the server is configured to use LTPA, the server first checks for a valid LTPA token for the SSO domain the server has been configured for. If the LTPA token is not yet present the user must authenticate normally.

Technology

In order for a server to use the LTPA authentication mechanism, it must first be configured to do so. When configuring the usage of LTPA between servers, the servers must be in the same domain (also configured in the LTPA configuration) and use the same LTPA SSO key as each other. Once the user has been authenticated the first time, the server creates two cookies: LtpaToken and LtpaToken2. The latter is the latest version of the token, the former is used for backward compability with older servers. The cookies are encrypted and contains (as a minimum requirement) the user's login.

When the same user accesses another server in the same SSO domain, the user will not need to re-authenticate. The server will read the LTPA token and after validating it accept the users authentication.

The LTPA token is time sensitive and will eventually expire. As a result it is important that the time on the server is synchronized as the server might otherwise consider a fully valid token as invalid. How long the token is valid for is configured on the server.

More information

88 questions
5
votes
4 answers

Generate an LTPA token?

We have a need to integrate a server with our WebSphere environment that does not support LTPA. I found Working with Lightweight Third Party Authentication (LTPA) by Cosmin Stejerean and corresponding code to decode the information in an LTPA…
Shadowman
  • 11,150
  • 19
  • 100
  • 198
5
votes
2 answers

How to use the information in an LTPA token

Consider the following setup: A webapplication deployed on a Websphere Application Server (6.1 if it matters) the app will get accessed through a webseal reverse proxy the webseal takes care of the authentication and passes on an LTPA token as sign…
Jens Schauder
  • 77,657
  • 34
  • 181
  • 348
4
votes
0 answers

Spring security - Websphere token authentication along with Spring security

I have a spring boot application with simple database authentication Spring security. In lower environments, we use this and for higher environments(deployed in Webpshere application server) the request for the spring boot applications has LTPA…
user418836
  • 847
  • 3
  • 8
  • 19
4
votes
2 answers

UnauthorizedSessionRequestException on WebSphere 8.5.5 with a vaadin web application when LTPA token expires

In our vaadin web application we get an UnauthorizedSessionRequestException when the LTPA token expires. The application is not responding anymore after that. The LTPA token expires even if the session is not inactive and the user does seomething.…
ResidentSleeper
  • 93
  • 1
  • 7
3
votes
2 answers

can I discover another users LTPA2 token on the machine / in the browser?

If you put sit Paros on the traffic between your browser and a web application being hosted in WebSphere, you will have two session identifiers passed as part of the cookie section of the HTTP request: A JSESSIONID. This is your HTTPSession ID as…
Fintan
  • 71
  • 1
  • 7
3
votes
2 answers

Generate Ltpa Token for SSO in Websphere Application Server 9.0

As this is the first time I am working with Websphere Application Server, And with the LTPA token. I am having multiple issues . I have installed the WebSphere Application Server 9.0 , And created a Active Directory Ldap server Windows . And tried…
Mr.R0bot
  • 131
  • 7
3
votes
0 answers

Spring security with LTPA token

we have a web application using Spring Security to do authentication. Now we have a project need to deploy the web application in WebSphere and use LTPA for SSO between other applications. How can i configure spring security to use WebSphere LTPA…
stanicmail
  • 743
  • 7
  • 19
3
votes
2 answers

Single Sign On using Tomcat

We are thinking about moving from WebSphere to Tomcat. In WebSphere, we use LTPA to achieve single sign on between the different applications (running in different physical servers). What is the best way to get single sign-on between 2 physical…
Konrad
  • 3,593
  • 3
  • 19
  • 17
3
votes
1 answer

Invalidate LTPA token on Websphere

I am working on Integration project not on web based project, deployed on WebSphere Application Server having version 7.0.0.39. As I am not working on web project, I cannot use ibm_security_logout for logout(invalidating ltpa token). So can any one…
Shailesh Yadav
  • 1,061
  • 1
  • 15
  • 30
3
votes
2 answers

A user authenticated as anonymous has attempted to access a session owned

Before I log in I can hit anything outside of my security constraint directory. If I try to go to a location inside of the security constraint directory it redirects me to the form login page. As you would expect. Once logged in I can go about my…
Justin Brew
  • 33
  • 1
  • 5
3
votes
1 answer

WAS Liberty: SSO Cookie not set on programmatic login

I tried to do an old fashioned login on WAS Liberty using LoginContext: CallbackHandler callbackHandler = WSCallbackHandlerFactory .getInstance().getCallbackHandler("userName", "realmName", "password",…
Billie
  • 99
  • 4
2
votes
0 answers

The LTPA token that is used to login is invalid - Maximo Rest API

I'm building an application that accesses Maximo Rest API, and I this is the code I use to call the API. I'm using .NET Framework 4.5 C# public class MaximoClient { private string ServerURL; private string AuthUsername; private string…
Kenny Togunloju
  • 179
  • 1
  • 7
2
votes
1 answer

WebSphere JAX-WS Cross-Cell authentication

We want to build a front-end web application to consume the WPS’ HumanTask API using JAX-WS. This web application should be able to query current tasks for a specific user, claim tasks not claimed previously by any other user, complete tasks and so…
Alonso Dominguez
  • 7,750
  • 1
  • 27
  • 37
2
votes
0 answers

How to Generate a LTPA token from the Application that has been deployed in Web Sphere Application Server

I have a Spring Application, That authenticates the user name and password, And uses the JWT token for the SSO, I have deployed it in the Web Sphere Application Server, (**I have used the WAS 9 )I need the application to generate the LTPA token so…
Mr.R0bot
  • 131
  • 7
2
votes
2 answers

LTPA Token in Tomcat (Spring security)

I need to create a sso(Single Sign On) based on the LTPA, is there a way to use the tomcat server to accept the LTPA token or the spring security can decrypt the LTPA token and authorize the user. And I have probably searched everywhere, However…
Mr.R0bot
  • 131
  • 7
1
2 3 4 5 6