Customization of login forms for reauthentication

WebSEAL supports reauthentication for both forms authentication methods.

By default, forms authentication uses the login.html page to request user name and password information from the client (see Static server response pages). This default login page is also used during reauthentication.

It is possible to have the user name field in these login pages automatically filled in during reauthentication using the USERNAME macro (see Macro resources for customizing response pages). The user needs to complete only the password (passcode) field.

For example, modify the following line in the login.html page:

<TD><INPUT NAME="username" SIZE="15"></TD>

to include the USERNAME macro:

<TD><INPUT NAME="username" SIZE="15" VALUE="%USERNAME%"></TD>

During an initial login (unauthenticated user), the value for the USERNAME macro is empty and the user name text field displayed on the login page appears with the entry "unknown".

For a reauthenticating client, the USERNAME macro would contain the value of the client user name. The user name text field on the login page appears with the user's name automatically provided.

Parent topic: Reauthentication