[opencms-dev] Re: Login a user not knowing the password [SSO]

[Thomas März]

"Alessandro Magnolo" <alessandro.magnolo at gmail.com> writes:

> Is this possible with the existing OpenCms API ?
> Or do I have to modify the CmsJspLoginBean source code (in this case
> any help is greatly appreciated) ?

Get a CmsObject that can write and read any CmsUsers.

Then after a successful authentication of the request
parameters, use the CmsObject to set the user's password to
something random, write the CmsUser-object, remember the new
password, and now you can login the user with his username and
password.

Of course you can also always use the same password, but
then there should be no OpenCms login page available, but
only the SSO login page.

This solution doesn't need OpenCms' source to be modified.


Regards,
Thomas