Documentation
Liferay provides a rich store of resources and knowledge to help our community better use and work with our technology.
IFrame Portlet
Specify a role name that a user must be associated with in order to configure the IFrame portlet to use the @password@ token. This token is used to post the password of users who access this portlet in order to automatically login to the framed site.
No role is required by default. However, it is recommended that you specify a role in high security environments where users who configure this portlet may attempt password theft. See http://issues.liferay.com/browse/LPS-5272 for more information.
iframe.password.token.role=