We need to implement a timeout/logout in collaboration for a client security requirement. I have been supplied a solution that shows how it can be done using the servlet session but it only replaces the basic collaboration authentication, and we need it to run against ldap (active directory) as well. Has there been any work or guidance how to extend the LDAPLoginModule for jaas to pull id/credentials from a http parameters rather than from the http basic Authorization header?
Thanks!
