Steps

To hand authentication over to the Servlet container:

1. Configure the container itself to authenticate the requests it serves, following its own documentation.
2. Set the Container authenticator in the xwiki.cfg file:

   xwiki.authentication.authclass=com.xpn.xwiki.user.impl.xwiki.AppServerTrustedAuthServiceImpl

3. Add the property below to the same file, so that the users the container authenticates are created in the wiki:

   xwiki.authentication.createuser=empty

4. Restart the wiki.
5. Log in through the container and check that the wiki shows you as that user, and that a profile page now exists for it in the XWiki space.

FAQ

What happens when the container authenticates nobody?

The authenticator falls back to the standard XWiki authentication, so the login form still works for users who have a password in their profile.

Why is no user profile created?

The xwiki.authentication.createuser property is missing or does not hold the value empty; without it the authenticated user is only set on the request and never stored.

Related

• Authentication Types.
• Authentication Parameters.