SSO With MAC

SSO With MAC (Message Authentication Code) is a property in the portal.properties file, which is the default configuration file for Sun GlassFish Web Space Server. You can override this property using portal-ext.properties file.

To use SSO with MAC, post to an URL like:

http://localhost:8080/c/portal/login?cmd=already-registered&login=<userId|emailAddress>& password=<MAC>

Pass the MAC in the password field. Make sure the MAC gets URL encoded because it might contain characters not allowed in a URL.

SSO with MAC also requires that you set the following property in system.properties:

com.liferay.util.servlet.SessionParameters=false

See the following links:

http://support.liferay.com/browse/LEP-1288

http://en.wikipedia.org/wiki/Message_authentication_code

Set the following to true to enable SSO with MAC.

auth.mac.allow=false

Set the algorithm to use for MAC encryption.

auth.mac.algorithm=MD5

Set the shared key used to generate the MAC.

auth.mac.shared.key=