Overview of automatic redirection
When a user makes a request for a resource in a WebSEAL domain, WebSEAL sends the resource to the user upon successful authentication and policy checks. As an alternative to this standard response, you can configure WebSEAL to automatically redirect the user to a specially designated home or welcome page.
The customized redirection can be further configured with a range of macros specifying the user's authorization level, username, host name and so forth.
This forced redirection after login is appropriate, for example, when users enter the WebSEAL domain through a portal page. Automatic redirection also overrides user attempts to directly access specific pages within the domain by selecting user bookmarks.
The automatic redirection process flow is as follows:
- The user sends a request and successfully authenticates.
- WebSEAL builds a custom response and returns it to the browser
as a redirect.
This redirect response contains the URL value specified by the login-redirect-page stanza entry in the WebSEAL configuration file.
- The browser follows the redirect response (containing the configured URL).
- WebSEAL returns the page located at the configured URL.
Automatic redirection after login is enabled and disabled independently for each authentication method. Automatic redirection is supported for the following authentication methods:
- Forms authentication
- Basic authentication
- External authentication interface