Question concerning login.jsp

[Cantor, Scott]

On 4/25/13 3:33 PM, "Brewer, Edward L" <lee.brewer at Vanderbilt.Edu> wrote:

>I noticed on a good attempt I also have  _idp_session and/or
>_idp_athn_ic_key.
> 
>Is this because of the additional login-mobile.jsp?

/j_security_check is not going to work unless you're using
container-managed security.

I suspect you failed to replicate the conditional logic in the original
JSP file controlling how the form action is set.

<% if(request.getAttribute("actionUrl") != null){ %>
              <form id="login"
action="<%=request.getAttribute("actionUrl")%>" method="post">
            <% }else{ %>
              <form id="login" action="j_security_check" method="post">
            <% } %>

-- Scott