Doubt On Custom Login Screen

[piyush_kumar6]

Hi Experts,

I have some requirement for that , I have created custom Login Screen My code is like below :

<form method="post" name="logonForm" target="_parent" action="">

<input name="login_submit" type="hidden" value="on">

<input type="hidden" name="login_do_redirect" value="1" />

<input name="j_authscheme" type="hidden" value="default">

User ID* <input name="j_user" type="text" class="style6" value="" size="20" >

Password* <input name="j_password" type="password" class="style6" size="20">

<input name="button" type="button" on Click="my Function()" value="Log on">

</form>

On click of button i am setting action for the form ie ( "/irj/portal/login") through java script code.

Everything is working fine i am able to log in its checking the authentication also.

Now my doubt is that - is it recommended to log in like this ??

Please give your valuable suggestion.

If its not recommended then how to this ??

Regards,

Piyush

[piyush_kumar6]

Resolved

[Former Member]

Hi,

Are you creating a URL with userid and password appended?

Is this visible in the URL?

Are you using post or get?

I guess one of this might be your concern

Regards

Ayyapparaj

[piyush_kumar6]

Hi Ayyapparaj,

Thanks for your reply.

My form method is post .

I am not creating url with user id and password.

I am just setting the form method to /irj/portal/login

through javascript and userid and password is not visible in url

in address bar only http://domainName : port No /irj/portal/login is comming.

Regards

Piyush

[Former Member]

Hi Piyush,

If every thing is working fine .....then there is no prolbem with your approach.

Regards

Narendra

[Former Member]

Hi Piyush,

Since you are login to portal through custom screen then can you please check the below points.

1. After login through the that user are you able to maintain the user session etc . i mean say can you connect to some R/3 system etc through that login.

2. do you find any difference in functions by login in two defferent ways.

Since you can change the custom login screen look and feel according to your need so it is recommended to have such screen but again it should be secure.

Regards

Narendra

[piyush_kumar6]

Hi Narendra,

Thanks for your reply.

I am able to connect to R3 system through this login and not finding any difference in functions.

Regards,

Piyush

[Former Member]

Hi Piyush,

It is acceptable as long as the user's privacy is not lost and it is properly authenticated. Meaning, the custom login screen should be properly authenticated and secure.

Regards

Kishan

[Former Member]

Hi Piyush,

Are you login into portal through this custom login screen or its just for accessing some other application.please clarify.

See as long as your authentication process is able to hide the login Id and password to other users. I mean to say if other person unable to see ones possword then its fine and is recoomended.It should be secure.

Regards

Narendra

[piyush_kumar6]

Hi Narendra,

I am login into portal through this custom login screen.

Regards,

Piyush