Logging in users without using cookies

I'm designing a website using JSP for devices that don't support cookies, so I want to find another way to log on users and keep them logged in. The closest example of what I want to do is http://wap.oa.yahoo.com/ . If you completely disable cookies and you login, yahoo attaches a "ySid" to the end of each URL, which is discarded once you log out.
How exactly do I implement such a process?
I have a simple sign on page with a form and fields for the username and password. Once the form is submitted, "login.jsp" authenticates the user. Now if the authentication goes well, I want to create something like an ID that can be used only by this user for this session (right now, I set a cookie instead, which doesn't work on the cookie-less devices).
Any help is appreciated. :)

Hi ancade
How exactly do I implement such a process?
Well that's entirely upto the designer.
Just like u said that Yahoo attaches a SID, so u can have ur own way of creating a custom SID. How u do that is the notion of ur brain.
Say for instance, a user named "abc" logs in. Once authenticated, u can have a random number function generate a random number.
Then u can declare a variable say user_sid and append it to the username.
What I mean is, say the random number generated is 123456. Then u can append it to "abc" as, say, "abc_123456". Now this becomes ur custom SID...the way Yahoo does.
Hope this helps.
Cheers !!
Sherbir

Similar Messages

  • OIM11gr2 - How to get currently logged in user details using oim api

    Hi All,
    I have a requirement to retrieve currently logged in users profile in the process adapter.
    I have tried with getSelfProfile in tcUserOperation and also ContextManager.getOIMUser API's however, in both the cases i am getting xelsysadm details only.
    Also as know request details in Process task mapping doesnot work for OIM11g onwards (its returning column not found exception )
    DOes any one has idea how to achieve this.
    PS. - i am using platform to retrieve API's.
    Thanks & Regards
    Swati Pandey

    You can get the logged in user name using the below java code:
    ADFContext adfCtx = ADFContext.getCurrent();
    SecurityContext secCntx = adfCtx.getSecurityContext();
    String user = secCntx.getUserPrincipal().getName();
    HTH

  • CC log  for user that used the application

    Hello GRC gurus ,
    I would like to know if there is a possibility to check users last log on in Compliance Calibrator . We have people that are doing simulations over Informer tab--> risk analysis --> user level and we would like to have a log .
    Thank you very much in advance

    Hello David,
    Well, sorry but I am still not clear with your question. There are two diffrent things I can guess in the same message. I would request you to please let me know which is the one which exactly you want to do, and would explain you both of the cases as under:
    1. Are you wanting to monitor if risk analysis is done on role creation?
    OR
    2. Are you wanting to monitor if the risk analysis is done on the assignement of the role to a user?
    I'm asking this because each of these 2 requirements can be  achieved by RE and AE respectively and the user carrying out these tasks need not even log into CC for doing either/both of 1 & 2.
    For 1:
    You can use RE and enable the Risk analysis step in the role creation process by enabling and using the web service which connects the Risk analysis from RE to AE. Here (in RE) you can enable the option "not to generate the role if Risk analysis is not done", to ensure everyone does a risk analysis before generating a role.
    For 2:
    You can use AE directly and do a risk analysis the same way as we did for RE (by using web service), before the role assignment is approved/done to the user.
    CASE 3:
    In case you do not have RE or AE installed (which is also one of the inferences I get from your post when you mentioned that there is one service desk who takes care of the role assignments), you may configure Risk Terminator in this case, wherein you can configure this tool at the backend to make it mandatory to do the risk analysis when:
    a) A role is generated at the backend.
    b) A role assignment is done at the backend.
    Regards,
    Hersh.
    Edited by: HERSH GUPTA on Sep 27, 2008 11:54 PM

  • Deploying a report to the end user without using Crystal Reports Server

    Hello,
      I'm using Crystal Reports Professional XI.
      I finished creating a report that contains several subreports.  Now it's time for me to deploy the report to the end user so that they can start running it.  The company that I'm doing this consulting work for does not have Crystal Reports Server setup so what is the best approach to deploying this report to the end user?  For now it would just be one user using the report but down the road there could be other people within his department that are running it as well.
        if you have any questions or need additional information to answer my posting just let me know.  Have a good day.
    Regards,
    Ting

    Hi Ting,
    I see now.... In older versions of CR like 8.5 there was a Deployment Wizard one could use to compile the report and runtime into an executable to run on an end users PC so that user could preview and refresh the reports.
    That ability stopped as of CR 8.5 or earlier, I don't recall exactly now.
    Yes, if they want to be able to run your report they will need to install a copy of Crystal Reports, then just send them your RPT file, they can then set Database location to their DB Source and then preview and refresh the report as required.
    Or as mentioned use a third party app to do the same or write your own. It's quite simple to do and likely one of our samples applications is all you need with a few basic changes, report source and DB log on info would need to be updated.
    As for licensing, the end user must purchase a copy of Crystal Reports to be able to use your application. Third Party app's would include the licensing mostly but check with them if you go that way.
    The convenient part is if the users want to write their own reports they can.
    And for your sake if you want to protect your reports the next version of CR has a read only RPT file format that all the user can do is preview and refresh the report. They can not edit it in anyway.
    Thanks again
    Don

  • Logging on user without needing password?

    I am an admin, how do i log into another account on my macbook pro without needing their password?

    BUMP
    Please help me!

  • How come I cannot recieve text messages from other iphone users without using imessage?

    I do not have a data plan, so when I am not connected to wi-fi I cannot recieve text messages from other people using an Iphone. I can recieve them once I turnn on imessage and am connected to wi-fi though. Why is this and what can I do to fix it??

    Check Settings>General>Cellular to be sure you have Cellular Data set to On.

  • How to use logged in user in the portlet

    Hi,
    From the portal application I have to get the logged in user and use the same user to filter the records in Portlet. I have to execute a view Criteria in portlet as a default method activity which takes logged in user as a input param.
    Is this achievable? Please let me know.
    Thanks in Advance
    Morgan.
    Its a duplicate of How to set userName from security context to Criteria in portlet
    Edited by: Morgan Freeman on Aug 24, 2011 1:24 AM

    It's possible. It's somewhat large to explain so i will write an example portlet. I will post the link to the application when it's finished.
    You just need to request the username from within your portlet. WebCenter passes the username to your portlet on the PortletRequest.
    From your business component you should write a query with a bind variable that you expose to your client. In your JSPX (portlet) you execute the method that sets the bind variable and create an InvokeAction in the executables so it gets executed upon load.
    That's the short description :)
    I'll give some more info when i finish the app.

  • SharePoint 2013 On premises provider hosted app - Logged in user info

    As per my understanding, following scenario is not possible in a provided hosted app deployed for SharePoint 2013 on-premises.
    1) User clicks the button of app on a SharePoint Site. Remote Web app page opens
    2) Remote app page shows the message "Welcome [User Name]" (without authenticating user again)
    3) If that user has contributor permissions in originating SharePoint site, the app should display "Welcome Contributor" otherwise it should display "Welcome Visitor"
    Please let me know if above functionality could be achieved?
    Hammad Arif EPM Advice Blog

    Hi,
    According to your description,my understanding is that you want to show user information when clicking  the app without asking credentials .
    By default, SharePoint Provider hosted app is hosted outside SharePoint web application, so it needs credentials to get OAuth. 
    I suggest you can use SharePoint hosted app, it hosted at the same web application as SharePoint, then when you click the app, it will get the current logged in user without  without asking credentials.
    Here are some detailed articles for your reference:
    Choose patterns for developing and hosting your app for SharePoint
    How to: Create a basic SharePoint-hosted app
    How to Check User permission for the web, list or SharePoint Item in SharePoint JavaScript Object Model
    Thanks
    Best Regards,
    Jerry Guo
    TechNet Community Support
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
    [email protected]

  • Is there a way of not using cookies or "customized" url's? (servlets+jsp)

    Hi there.
    I'm wondering if there's an already implemented way of establishing a session without using cookies or url withs session id variables. Maybe it's possible uging IP to know wich computer is connected along with something else.

    Actually, I don't hace any requierements to use only IP but I'm learning to develop web apps in general and this is a doubt I've been having for a while.
    I guess IP+browser+screen res.+something else could work.
    Someone would possibly want to use this so the browser user, even with some skills wouldn't know he's being tracked.
    Maybe I have this doubt because I always hear about all the tracking done by companys for several purposes. But I'm not sure.
    Anyway, all this started when I started reading about sessions and users loging in.
    Now. My real doubt is: What kind of tracking should be used and how should it be done?

  • What is a "logged in user" on the "Active Sessions" report in CF8 Server Monitor?

    I was looking at the Active Sessions Report (The Chart View) and saw I have more "logged in users" than "active sessions".
    I had expected them to be nearly the same.    It's on our Intranet where I log users in (using cflogin and cfloginuser) at the begining of their session and users should be logged when the session ends.
    I couldn't find a detailed explaination of what a "logged in user" means.   There is a chance that the same user is logged into a nested application as well as the Intranet, but I don't think that is what I'm seeing.
    I also don't see a way to get a list of what CF is counting as a logged in user.  I can only see a way to get the total count.
    Any help is appreciated. 
    Thanks,
    Jeff

    Thank you Michael for the reply, but I don't think that is the issue.
    When a user opens their browser on the intranet, a session begins and they are logged in (using the cflogin and cfloginuser).    If they close their browser, the session should hang around for 20 min. (per the server setting).   I am assuming this is still considered an "Active Session" since I can see this behavior in the report.
    At first, the Active Sessions and Logged In Users are exactly the same.   When the sessions start to time out, the active sessions are reduced,  but the Logged In Users remain the same.    Then,  after a while, they start to move together.  So I have more Logged In Users than Active Sessions.
    I left the Server Monitor open last night and for most of the night, I had 0 sessions, but 57  "logged in users".   This morning, as people opened their browsers, the Active Sessions and Logged In Users moved together.   The gap of 57 looks consistent.
    It looks like people are remaining logged in after their session ended.
    I am really looking for a detailed explaination of "active session" and/or "logged in user" as used in the server monitor.  It would be really nice to find a way to list the details about each item counted in the "logged in user" and not just the total count. 
    Thanks Again for your reply.
    jsm

  • How to get the logged in user to accept remote management

    Hi,
    It possible to have the currently logged in user to accept or reject a Remote Desktop connection?
    The reason is that the remote administrator taking control should not be able to see the currently logged in user without him knowing it. I know about the "being observed" icon but that's not enough.
    I want the remote administrator to be able to work freely when no users are logged in but if a user is logged in, I want some kind of request/validation-or-rejection mechanism before the remote desktop administrator can take control of the mac.
    Is that possible?
    Ludo

    ARD supports both modes that you desire... The problem, as I recall, is that these are "all or nothing" switches you get one way, or the other, but you can't have it both ways.
    The controls for these options lie behind the "Computer Settings..." button in the Sharing Prefs panel.
    "Anyone may request permission to control the screen"
    and
    "VNC viewers may control the screen with password:"

  • Storing Current Logged on User Details in Web Dynpro Java

    Hi Experts,
    My GP Process containd 2 steps:
       - Create Activity
       - Evaluate and Approve
    The user creates the Activity and the manager approves it.
    I have to make sure the User Details are avaialble for the Manager to see.
    How do i store the user details logged on.
    I need the "Name", "Date" and "Time" of the user when he creates the Activity.
    Can somebody guide me how to do it using Web Dynpro java.????
    Thanks a lot.
    Cheers
    Gaurav Raghav

    Hi Gaurav,
    Make use of background callable object which retrieves the logged in user details. If you are using WD and you need the logged in user infomation use the IWDClient . Code for getting this is there in sap help.
    Thanks,Uma.A

  • Subscribing calendar events without using impersonate or delgae access

    Hi,
    Is there any way to subscribe calender/mailbox event for each outlook user without using impersonate or delegate access approch. 
    if yes, please share how it can be done, as i found only impersonate approach or delegate acess.
    if no, please share the best possible solution to subscribe calendar events for each outlook user.
    I am new to exchange server developement, so do not know much.
    Thanks
    Nitin

    It depends what you mean by subscribe calender/mailbox event ?
    For you to access a mailboxes calendar folder using any exchange API you need to have rights to it so you will need to either use Impersonation or Delegate access. You can modify the default ACL on the Calendar folder which give Everyone access eg 
    http://community.spiceworks.com/how_to/show/29939-change-default-outlook-calendar-access-permissions-in-exchange-2010 . To access a folder you have rights to you just use the Mailbox overload of the folderId class
    http://msdn.microsoft.com/en-us/library/office/gg274408(v=exchg.80).aspx
    The other way of veiwing limited calendar information is to use the GetUserAvailability operation
    http://msdn.microsoft.com/en-us/library/office/hh532567(v=exchg.80).aspx with this you can view calendar event details (if this permission is shared to you)
    Cheers
    Glen

  • How to Use 'uid' for AD Users Without Domain Name For User Log in OAM

    How to Use 'uid' for synchronized Active Directory (AD) Users into Oracle Internet Directory (OID) Without Domain Name For User Logins in OIDDAS and OAM
    We successfully integrated OAM 11g with EBS R12.1.3 Now all the AD user id's stored in fnd_users table as [email protected]
    How can we remove @abc.com
    We are using OID 11g and OAM 11g
    Found the similar note for OID 10G: How to Use 'uid' for AD Users Without Domain Name For User Logins in OIDDAS and SSO [ID 580480.1]
    We are in OID 11g.
    Any help on this greatly appreciated.

    I couldn't find any reference that could be helpful -- Please log a SR and see if this is supported and if the steps are available.
    Thanks,
    Hussein

  • Running a non mandatory program from remote using powershell without a logged in user

    Hi all,
    is there a way to execute a non mandatory program (a task sequence in my case) from remote using powershell
    without a logged in user on the target system?
    I have the following code: 
    $ProgramObject = Get-WmiObject -Class CCM_Program -Namespace "root\ccm\clientsdk" -ComputerName $ComputerItem | Where-Object { $_.Name -match "$ProgramName" }
    Invoke-WmiMethod -class CCM_ProgramsManager -Namespace "root\ccm\clientsdk" -Name ExecutePrograms -argumentlist $ProgramObject -ComputerName $ComputerItem | Out-Null
    Works like charm, but only with a user logged in on the target system what is not a good solution for me. 
    I saw some other ways on the internet but these only work when the program is mandatory.
    Is there a way to archive what I need ? 
    thanks 

    Hi,
    If you deploy the program as a available deployment, there need a user to run the program. Otherwise, the program will never run. This is contradicted with your requirement(run the program at log off).
    So I concur with Peter.
    Best Regards,
    Joyce
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

Maybe you are looking for

  • Is there a way to undo the last itunes update? itunes will not now recognise my ipod nano

    I recently installed the itunes update to 11.3 and my ipod nano (gen 7) is no longer recognised in itunes. Is there a way to undo the update or is itunes issuing a fix for it. the message board indicate I'm far from alone with this problem!

  • How do I get the work done in Pages onto my new iPad 2?

    I've restored the new iPad 2 from the old "1". All my photos, notes etc are there but when I open Pages on the ipad2, initially it shows all my old docs (with no thumbnail) but they instantly disappear and I'm left with only the "getting started" doc

  • Database design problem for multiple language application

    Hi All, We are working on a travelling portal and for a traveling portal its content and details are the heart.we are planning to have it in multiple locale so this means we need to handle the dynamic data for each locale. currently we have following

  • Outlook Negotiate/NTLM authentication credential prompt

    Hello everyone, I have been digging quite a while now for a solution to this but apparently there is not a lot of systems out there utilizing this or having problems with it. Here it comes: We have a pure (no migration or coex) Exchange 2013 CU7 envi

  • Having problem to run JMS tutorial

    Hi, I have successfully compiled and add MyQueue to the queue. But when I try to run the sample program from the JMS tutorial my system would produced the exact error that I have posted bellow: ========================================= F:\ttech\jeti\