Issue

• The requirement is to secure REST API calls made for Business Central and Kie Server applications deployed in BPMS 6 using a supported SSO solution (e.g. Picketlink).
• User has got 3 applications, among which two EAR and one WAR (which is kie-workbench.war) . The kie-workbench.war (from version 6.4.0) was downloaded from JBoss Drools community website. As per user's application flow/design from one of their EAR a request would be sent to the /kie-workbench REST API for accessing it's Git repository (e.g. create Organization etc.) .
• The current requirement mandates user to implement SSO between these applications so that a user authenticated once using Picketlink and for all consequent calls internally happening between applications, it should not ask for authentication.