SSO with MAC (Message Authentication Code)

To use SSO with MAC, post to a URL like:

http://localhost:8080/c/portal/login?cmd=already-registered&login=<userId|emailAddress>&password=<MAC>

Pass the MAC in the password field. Make sure the MAC gets URL encoded because it might contain characters not allowed in a URL.

SSO with MAC also requires that you set the following property in system.properties:

com.liferay.util.servlet.SessionParameters=false

See the following links:

• http://issues.liferay.com/browse/LEP-1288
• http://en.wikipedia.org/wiki/Message_authentication_code

Set this to true to enable SSO with MAC.

auth.mac.allow=false

Set the algorithm to use for MAC encryption.

auth.mac.algorithm=MD5

Set the shared key used to generate the MAC.

auth.mac.shared.key=