salting passwords from IDP to Database (Yasser Afifi)

[Peter Schober]

There's no need to add your name to the subject of your posts
mid-thread. Also if you want to as a different question, compose a new
email to the list instead of replying to uan unrelated one.
And if you have questions about something someone said in another
post, reply to their post with questions, not to an unrelated note.
TL;DR: You really should learn how posting to technical fora on the
Internet works.

* Yasser Afifi <yasser at 3dissue.com> [2016-02-04 13:52]:
> I have another question about using a custom jsp login page. I previously
> asked about this and i was advised not to use jsp and just keep the
> velocity login page. What is the reason for this? why is it preferable to
> keep the velocity login and not use a custom jsp?

AFAIK mostly because you don't have to rebuild the WAR simply in order
to get web site changes into the system.

> Another question is if i want to go with the jsp option, where should i
> post the login form?

AFAIR the software still comes with a login.jsp by default, and that
is correct and funtionally complete. I.e., you shouldn't do/change
anything with regard to the form/@action.

> Is there anything else missing from the form before posting it?

The software ships working copies of the login etc. files.
Documentation for changing/branding the web pages is available in the wiki.
-peter