custom web site authentication

We run two different web sites from our IBM i. One for students and one for employees. We do not use Apache authentication to access these sites because we found that persistent session would kill the system. (this was years ago and may be different today but we have not attempted to change things) Both of these sites use LDAP to check the username/password against our active directory users and allows access if the authentication to AD does not fail. Many other 3rd party web sites that we use have single signon setup with either Shib or ADFS that will pass a ticket to those systems to bypass authentication. We have been asked if the two web sites hosted on IBM I could also do this. That does not sound like anything we would want to try and code inhouse. Does anyone know of any tool that would do this for us?

Mike Cunningham

________________________________
This email may contain confidential information about a Pennsylvania College of Technology student. It is intended solely for the use of the recipient. This email may contain information that is considered an "educational record" subject to the protections of the Family Educational Rights and Privacy Act Regulations. The regulations may be found at 34 C.F.R. Part 99 for your reference. The recipient may only use or disclose the information in accordance with the requirements of the Federal Educational Rights and Privacy Act Regulations. If you have received this transmission in error, please notify the sender immediately and permanently delete the email.