Hi all, This is infrastructure question. We are hosting activiti in tomcat 7. When an HTTP request is sent from rest-client to tomcat (hosting Activiti REST API web) we must set header that contains the 64Base string of the authentication, and use Basic authentication. We would like to use spengo with the build-in tomcat SSO support - https://tomcat.apache.org/tomcat-7.0-doc/windows-auth-howto.html
This means that the client that make the rest api call, instead of setting a header with credential, will automatically send the credential of the logged-in user (Windows active directory intranet enviroment) and tomcat verifies it automatically. We need to configure jaas and spengo as far as i read.