Introduction

The phixflow-login.xml configuration file allows the operator to define different login form configurations with restricted login options e.g. Local only, Active Directory only, all options. The user can then choose the login for to be displayed by providing an extra parameter to the PhixFlow start URL, or accept the default.

There are 2 reasons for doing this:

1. You have configured Local logins and Active Directory (or SAML / SIngle Sign-on) logins, and you want advanced users to see all login options but normal users to see only Active Directory.
2. You want to enable SAML / Single Sign-on auto login. This logs you in automatically using your current logged-in Microsoft Windows credentials without displaying a login form, and cannot be mixed with other form options.

Configuration

If $webapp/WEB-INF/classes/phixflow-login.xml does not exist, create it by copying phixflow-login.xml.example.

Edit $webapp/WEB-INF/classes/phixflow-login.xml:

Find the loginConfiguration bean:

	<bean id="loginConfiguration"
		class="com.accipia.centerview.util.LoginConfiguration"
		p:defaultForm="local" />

The lines immediately following define 3 login forms:

You can add new forms and edit or delete any of these 3 examples, provided that you define at least one form and that the loginConfiguration's defaultForm (above) matches the name of one of the defined forms.

Login Form Details

Each login form has the same format:

	<!-- This login form allows all login methods to be selected -->
	<bean id="fullLogin"
		parent="parentLogin"
		p:name="full"
		p:localLogin="true"
		p:activeDirectoryLogin="true"
		p:samlLogin="true"
		p:samlLabel="Single Sign-on"
		p:defaultSelected="local" />

The form properties are as follows: