title: Using SSPI to get SSO from Java application running on Windows
body: <p>I have a Java application running on Windows that needs to authenticate to a webapp using Kerberos/SPNEGO.  I'm aware of how to configure JAAS to achieve this, but I find the Java (JDK6 and JDK7beta) Kerberos implementation to be lacking a couple important features I need.  For example, support for referrals or using the DNS to figure out the realm of a host (I have a multi-realm environment).</p>
  
  <p>Is there a third-party module that can implement authentication using the Windows native <a href="http://msdn.microsoft.com/en-us/library/aa380493(VS.85).aspx" rel="nofollow noreferrer">SSPI</a>?  We've already gone through the trouble of configuring our Windows clients to work within our environment, it'd be nice to not have to do it again for Java.  I'm aware of <a href="http://waffle.codeplex.com" rel="nofollow noreferrer">Waffle</a> and its WindowsLoginModule, but it doesn't seem to do SSO as it requires users to re-enter their credentials into the application.</p>