How to use Single Sign On in a Vaadin application

Question

I have a Vaadin 7 application that needs to use SSO (or a better kind of enterprise sign on method?) to authorize users through an LDAP directory. I also need to use groups or "roles" to differ between users and what they are allowed to access in my application. I am new to both login processes and Vaadin, and all I have right now is a working login form in my application that authorizes users against a fake "AD class" that I made myself.

So...

• Where and how do I even start?
• I read something about portlets and Liferay in this context. Is it even possible to achieve my goals without using Liferay or portlets?
• Are there any good Vaadin addons that can help me with this? 
• Can I use Spring security for this? (I am using xpoft SpringVaadinIntegration addon and I know it handles roles for example)...

If I sound lost, it's probably because I am. I will gladly read up on this, if I even knew where to start. Please help me chop this monolithic blob of confusion into smaller pieces =)  

Answer 1

SSO with windows login only works in the intranet and it requires the use of kerberos or ntlm.

You can use a library like waffle to integrate things.

Look here:

• Link #1
• Link #2