Howto warn users authenticating to Identity Server from mobile devices that javascript must be enabled

  • 7007995
  • 25-Feb-2011
  • 26-Apr-2012

Environment

Novell Access Manager 3.1 Windows Novell Identity Server
Novell Access Manager 3.1 Linux Novell Identity Server
Blackberry mobile devices with user-agents that have javascript disabled by default

Situation

By default, the Identity Server sends back login pages to the user agent with javascript. Some mobile devices have javascript disabled by default and do not work with these default pages. Two options exist to workaround the issue:

a) develop custom login pages that do not submit credentials using javascript or
b) warn users that javascript must be enabled.

Resolution

For setups requiring the first approach, the login.jsp page can use the following input statement to submit the credentials

 <input alt="<%=handler.getResource(JSPResDesc.LOGIN)%>" border="0" name="loginButton2" src="<%= handler.getImage("btnlogin.gif",true)%>" type="submit" value="Login">


rather than calling the method that submits the credentials using javascript.

        <form method="POST" enctype="application/x-www-form-urlencoded" action="<%= hand.getContentUrl() %>"></form>
        <script language="JavaScript">
            <!--
                document.forms[0].submit();
            -->
        </script>

For setups requiring the second approach, add the <noscript> section below to the mainRedirect.jsp page on the Identity Server as follows:

 

<html>

    <head>

        <META HTTP-EQUIV="expires" CONTENT="0">

    </head>

    <body>

        <noscript>

          <jsp:include page="warning_page.html"/>

        </noscript>

        <form method="POST" enctype="application/x-www-form-urlencoded" action="<%= hand.getContentUrl() %>"></form>

        <script language="JavaScript">

            <!--

                document.forms[0].submit();

            -->

        </script>

    </body>

</html>


The <jsp:include page=”warning_page”> is used to forward the request to a different page, where users are warned about having to turn on java scrip.