title: Tomcat Integrated Windows Authentication across Multiple Domains
body: <p>I am attempting to create a single sign on system in which an application running on a Tomcat server in a DMZ which is not joined to any domain, is able to authenticate against multiple domains while still automatically logging the user using their Windows Credentials.</p>
  
  <p>Key Requirements:</p>
  
  <ul>
  <li>Must support multiple domains</li>
  <li>Users must not be prompted for credentials if they are on a supported domain</li>
  <li>Web server CANNOT be on a domain</li>
  <li>The Web server is located in a DMZ</li>
  <li>Must support Tomcat 6</li>
  </ul>
  
  <p>Is this even possible and if so is there any sort of framework that supports doing this? I've looked at JOSSO, Shibboleth, and OpenAM but none of them seem to meet all five of the requirements.</p>
  
  <p>The <code>JCIFS NtlmHttpFilter</code> looks like exactly what I am looking for, unfortunately it is deprecated and is no longer recommended.</p>
  
  <hr>
  
  <p>Visio diagram for reference.
  <img src="https://i.stack.imgur.com/RwEsh.png" alt="enter image description here"></p>