password autocomplete

Christopher Bland chris at fdu.edu
Mon Mar 12 21:37:48 GMT 2012


Russel,

I added to my login page because I was concerned about labs and open 
pcs.  If you start typing you username on the login page is gives you 
login id of a previous user.

<form action="<%=request.getAttribute("actionUrl")%>" method="post" 
autocomplete="off">

-Chris

On 3/12/12 5:23 PM, Russell Beall wrote:
> Hi,
>
> I am researching the use of password autocomplete on the shibboleth login page and I wonder what are the best practices and recommendations in the community.
>
> Do people generally disable it (or would like to if they knew how) or leave it enabled?
>
> I note that the default login.jsp in the installer does not use the form flag, perhaps because it is "nonstandard".  By this I am referring to the attribute of the HTML form element: autocomplete="off".
>
> In searching the shibboleth-users archive I see no mention of the term "autocomplete" anywhere, though I would be surprised if it hasn't been discussed at some point…
>
> Thanks,
> Russ.
>
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net


-- 
fdu logo 	
Christopher Bland
Systems Manager
Information Systems and Technology
*1000 River Road, Teaneck NJ 07666*
Mail Stop: T-BH1-01
phone: 201-692-2414 | fax: 201-692-2494 | email: chris at fdu.edu 
<mailto:chris at fdu.edu>
"Fairleigh Dickinson University will never
                                  ask for your password. Please do not 
share it with others!"

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120312/922bfdd9/attachment-0001.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: small-full-fdu.gif
Type: image/gif
Size: 4243 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20120312/922bfdd9/attachment-0004.gif 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: phone.gif
Type: image/gif
Size: 306 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20120312/922bfdd9/attachment-0005.gif 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: fax.gif
Type: image/gif
Size: 116 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20120312/922bfdd9/attachment-0006.gif 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: mail.gif
Type: image/gif
Size: 853 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20120312/922bfdd9/attachment-0007.gif 


More information about the users mailing list