Configuration Best Practices - Liferay Portal Performance Best Practices - page 55

The auto login filter is also used when we define a custom auto login hook through
portal-ext.properties . If we are not using the auto login functionality in the
portal, it is recommended to disable the auto login filter. By disabling this filter, we
can improve the response time and load on the Portal's server. To disable this filter,
we need to add the following property in the portal-ext.properties file:
com.liferay.portal.servlet.filters.autologin.AutoLoginFilter=false
The CAS filter
Central Authentication Service ( CAS ) is an authentication system. Liferay Portal
supports Single Sign-on with CAS. As discussed in the previous section, most of the
SSO integrations in Liferay Portal are implemented using servlet filters. For CAS
integration, Liferay Portal includes the CAS filter. This filter intercepts all secure
requests. It redirects all the unauthenticated secure requests to the CAS server for
authentication. Even when we are not using CAS integration, all secure requests will
pass through this filter. It is recommended to disable this filter if we are not using
it. To disable this filter, we need to add following property to the portal-ext.
properties file:
com.liferay.portal.servlet.filters.sso.cas.CASFilter=false
The NTLM SSO filter
NTLM is a Windows protocol, which provides an authentication service. Liferay
provides support to authenticate users using NTLM. With this feature, users do not
need to sign in to Liferay Portal to access secure pages. The system automatically
authenticates the user based on their Windows login credentials. This feature is also
implemented using servlet filters. If this feature is not used, it is recommended to
disable the servlet filters to improve the response time. To disable filters associated
with this feature, we need to add the following properties in portal-ext.properties :
com.liferay.portal.servlet.filters.sso.ntlm.NtlmFilter=false
com.liferay.portal.servlet.filters.sso.ntlm.NtlmPostFilter=false
The OpenSSO filter
OpenSSO is one of the leading open source SSO providers. It is now known as
OpenAM . Liferay supports integration with OpenSSO. OpenSSO integration
is also implemented using the servlet filter. Again, if OpenSSO is not used, it is
recommended to disable the servlet filter. This can be done by adding the following
property to portal-ext.properties :
com.liferay.portal.servlet.filters.sso.opensso.OpenSSOFilter=false