Auto-login user programatically?

[Byte Flinger]

Yes, but how do you go about doing that avoiding requiring an exisiting
session cookie?

I have tried to create a very simple LoginHandler which would simply log
the user in if he just goes to the right page, regardless of given input
(for test purposes) but it seems the authentication engine still requires
an existing cookie

I keep getting "LoginContext key cookie was not present in request" from
HttpServletHelper.

I am probably missing something though I am not sure what. I have browsed
through several login handler implementations and Shibboleth's own source
code but I keep ending up on the fact that it requires that the user has a
cookie setup on his browser.


On 25 July 2013 16:07, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 7/25/13 9:57 AM, "Byte Flinger" <byteflinger at gmail.com> wrote:
> >
> >Yes, although that is not the main issue I believe, if we take an LDAP
> >server as an example it would be simple to login the user programatically
> >by calling the Unsolicited SSO with the required parameters. The issue
> >would be that since the login was done programatically on server side,
> >the user browser never sets any cookie which, to my understanding, is
> >required by Shibboleth (Though it may be a misconception on my part and
> >is only required for the default UserPassword loginhandler).
>
> You can't get the IdP to consider somebody logged in unless you configure
> a login handler. Which one you use and how it works is up to you, but you
> can't not have one.
>
> -- Scott
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130725/5a3676be/attachment.html