If set to true (the default), then any Authorization header in the
request that does not resolve to a valid OAuth token will cause the
application to generate a HTTP 401 Unauthorized, instructing the user to
use OAuth.
SSOClientFilter is responsible for checking cookies for an existing session,
looking up the details of the user if one is found, and placing this User object
into a request attribute.
SSOLinkGenerator will try and get a configuration from the ThreadLocal based SSOConfiguration, but you can
override this by just setting a Configuration manually
SSOLogoutLinkGenerator will try and get a configuration from the ThreadLocal based SSOConfiguration, but you can
override this by just setting a Configuration manually