We are thinking about moving from WebSphere to Tomcat. In WebSphere, we use LTPA to achieve single sign on between the different applications (running in different physical servers).
What is the best way to get single sign-on between 2 physical machines in Tomcat?
On
Tomcat comes with SSO implementation. An other thing you want is session replication between nodes.
Tomcat's SSO implementation only provides single sign on between apps on the same (logical) server. However if you want SSO between apps which are located on different servers or even different platforms then Tomcat's SSO option probably won't cut it.
I'd suggest you look at a more robust solution like CAS or Cloudseal. Cloudseal also has a Tomcat plugin which may simplify things for you