Implementing a local SSO hook into v3

[Cantor, Scott]

> Is there a good place to insert the:
> - reading of a cookie and converting it to an AuthenticationResult to be
> interpreted for SSO
> - writing a cookie out to reflect a just-completed authentication
> 
> Perhaps on either ends of a custom authn flow?  Actions would have
> access to the http request/response objects so could presumably read/set
> cookies.

That would probably just be using the external authn flow. If you're more comfortable doing it with SWF, then you could do it with a custom login flow certainly, but if you have an existing servlet/JSP/whatever that's consuming your cookie, adapting that into an external authn step is probably easier.

-- Scott