The login page included with the web-application, while remaining compatible with standard form-based authentication, is the only place that is aware that it can be deployed with the OpenID Connect Authenticator and contains logic that either redirects to the login page hosted by the OP, offers the user links or buttons to go to one of the configured OP login pages or use a login form and standard form-based authentication, or some combination of the above.

The same web-application binary can be deployed with or without the OpenID Connect Authenticator. Web-applications are still developed for form-based authentication so that the auth-method element in the deployment descriptor's login-config is FORM and the form-login-config element defines the login and error pages included with the web-application.

The OPs that implement the standard and can be used with the authenticator include Auth0, Google Identity Platform (including G Suite), Amazon Cognito, Microsoft Azure AD, Yahoo!, empowerID and others. The OpenID Connect Authenticator extends the standard form-based authenticator and adds ability to use an OpenID Provider (OP) to log users in instead of or in addition to the login form hosted by the web-application itself. These standard authenticators are implemented as Valves and are deployed in the web-application's context automatically depending on the application deployment descriptor's login-config element (section 14.4.19 of the Servlet specification). Tomcat includes a number of built-in authenticators for the standard authentication mechanisms defined in section 13.6 of the Java Servlet 4.0 specification, such as HTTP Basic, HTTP Digest, and Form Based. Corresponding pages for Tomcat 8.5 can be easily found on the Apache Tomcat website.Ī complete sample web-application is available at. References to Tomcat documenation in this manual link to Tomcat version 9.0.

This is an authenticator implementation for Apache Tomcat 9.0 and 8.5 that allows web-applications to use OpenID Connect to log users in.

Apache tomcat 8 username password xml