IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

[acnt-mgt]
login-redirect-page
=
/jct/intro-page.html
4.
Stop
and
restart
the
WebSEAL
server.
Disabling
automatic
redirection
To
disable
automatic
redirection,
complete
the
following
steps:
1.
Open
the
WebSEAL
configuration
file
for
editing.
2.
Disable
automatic
redirection
for
each
of
the
applicable
authentication
methods
by
commenting
or
removing
the
entry
for
each
authentication
method
in
the
[enable-redirects]
stanza:
[enable-redirects]
#redirect
=
forms-auth
#redirect
=
basic-auth
#redirect
=
token-auth
Note
that
the
hash
character
(
#
)
is
added
to
the
start
of
each
line.
The
example
above
disabled
automatic
redirection
for
forms
authentication,
basic
authentication,
and
token
authentication.
3.
Stop
and
restart
the
WebSEAL
server.
Limitations
WebSEAL
does
not
support
automatic
redirection
at
login
under
the
following
conditions:
v
When
a
Windows
client
has
authenticated
using
SPNEGO
protocol
(and
Kerberos
authentication)
as
part
of
Windows
desktop
single
sign-on.
v
During
reauthentication.
v
When
the
browser
is
reopened
while
using
basic
authentication.
Redirection
works
as
expected
the
first
time
a
user
visits
a
page
with
a
browser
and
authenticates
with
a
valid
user
name
and
password.
However,
if
that
instance
of
the
browser
is
closed
and
another
opened,
the
redirected
page
is
not
displayed
after
the
user
is
authenticated.
Chapter
7.
Advanced
WebSEAL
authentication
213