Disabling fallback to FORM authentication

As mentioned, the fallback to FORM authentication is automatically enabled. This means that users can authenticate either by the SPNEGO handshake with their Kerberos ticket or by providing their credentials in the eXo Platform login form, which will perform verification of credentials against the Picketlink IDM database.

For some reasons, you may want to enforce authentication only by SPNEGO and disable possibility to authenticate with the eXo Platform login form. In this case, you will need to add the enableFormAuthentication=false option to the SSODelegateLoginModule module:

Copyright ©. All rights reserved. eXo Platform SAS
blog comments powered byDisqus