send-header-spnego-first

send-header-spnego-first = {yes|no}

Description

By default, WebSEAL selects the authentication challenge to return to the client by sequentially searching the available authentication mechanisms until it finds one that is enabled. We can use the send-header-spnego-first entry to ensure that WebSEAL selects SPNEGO header first before any of the other configured authentication mechanisms.

SPNEGO authentication can use either forms login or a header. If send-header-ba-first is set to yes and send-header-spnego-first is set to no, WebSEAL sends a BA header first, but uses the default search for an SPNEGO forms login.

Options

yes	WebSEAL sends the header first.
no	WebSEAL searches sequentially through the available authentication mechanisms and sends the first one that is enabled.

Usage: Optional

Default: no

Example:

send-header-spnego-first = yes

See also

send-header-ba-first

Parent topic: [server] stanza