SSO redirect

[Migrated From Jforum.net]

I am trying to integrate the forum with our SSO solution and am having difficulty with the SSO implemenation. I am able to process the cookie returned by our solution within my SSO implementation class without any problem. The problem I have is that it appears as if the isSessionValid method is invoked on every request. I only want to force them to my SSO solution when preforming a function requiring authentication. I would like to have anonymous users see the forums without going through our authentication. I am also trying to use the sso.redirect configurations but with little luck.

What is the best way to implement cookie based SSO that does a redirect to our SSO login/authentication page when doing ONLY registration required functions?
[originally posted on jforum.net by cs1559]

[Migrated From Jforum.net]

On the redirect problem I am having, in my SystemGlobals.properties, I have the following:

sso.redirect = https://hostname/pagLogin/

and then try to post a reply on the forum, I receive a 404 error that looks like:

/forumhttps://hostname/pageLogin//forum/posts/reply/0/6.page

I maybe missing some configuration information in the documentation, but any help is appreciated.


[originally posted on jforum.net by cs1559]

[Migrated From Jforum.net]

This is kind of odd, as we had requests to ensure that isSessionValid() is called on every request.

For now, if you can hack into the code and make it work, it would be the fatest solution, at least for you.

Of course that we appriciate considerations and suggestions.

Rafael
[originally posted on jforum.net by Rafael Steil]