https://bz.apache.org/bugzilla/show_bug.cgi?id=57753
Mark Thomas changed:
What|Removed |Added
Resolution|--- |INVALID
Status|NEW
https://bz.apache.org/bugzilla/show_bug.cgi?id=57753
--- Comment #2 from Kenneth Gendron ---
Even more investigation. This only occurs when setting requireReauthentication
to true. In the SingleSignOn implementation it explicitly does not set the
user principal if requireReauthentication is set
https://bz.apache.org/bugzilla/show_bug.cgi?id=57753
--- Comment #1 from Kenneth Gendron ---
After further investigation it appears the first web application that
authenticates will get the user back when calling getRemoteUser(); however, any
other web applications that come after will get null.
