title: Manually store Crowd SSO token in cookie?
body: <p>I'm trying to implement SSO using Atlassian Crowd, and there's a surprising lack of good documentation or even examples out there.  </p>
  
  <p>So far, I authenticate a user using <strong>CrowdClient.authenticateSSOUser</strong>, and get back a SSO Token (String) if successful.  Then, I take this token and stuff it in the cookies myself (via HttpServletResponse).  On subsequent page visits, I grab all the cookies, search for this one, and then call the <strong>CrowdClient.validateSSOAuthentication</strong> method on it.</p>
  
  <p>My question is this:  Am I supposed to be using more Crowd code for SSO?  I seem to be doing more manually than I'd expect.  </p>
  
  <p>...I DO see hints of other possibilities out there...  For example:</p>
  
  <ol>
  <li><p>In <strong>crowd.properties</strong>, you can specify a <strong>crowd.token_key</strong>, which is apparently what name the app should use store the token in a cookie (though setting this value doesn't magically make that happen).</p></li>
  <li><p>Things like the <a href="http://docs.atlassian.com/atlassian-crowd/latest/com/atlassian/crowd/integration/http/util/CrowdHttpTokenHelper.html" rel="nofollow noreferrer">CrowdHttpTokenHelper</a> exist in the latest version - yet seem to have no easily-found related examples (or documentation other than JavaDoc).</p></li>
  </ol>