The Tomcat SSO implementation provides a single sign between applications on the same (logical) server. However, if you want to use SSO between applications located on different servers or even different platforms, then the Tomcat SSO option will probably not truncate it.
I suggest you take a look at a more robust solution like CAS or Cloudseal . Cloudsal also has a Tomcat plugin that can simplify things for you.
source share