Felix Thiele

Hey, currently I am trying to enable SSO for a SPA-Javascript-web-application that interfaces with JavaEE-REST endpoints deployed on a Glassfish 3.1.2.2 and Java 7. I followed your guide and was quite happy to have everything up and running in minutes. Unfortunately, as soon as I asked someone else to connect to my local system to try it out, I was surprised to see that he was authenticated with my account name. I figured, that SPNEGO somehow uses the servers principal name instead of the clients?!...