CQ User Session for public login (aprox 1mil users) | Community
Skip to main content
A
Anonymous
October 16, 2015
Solved

CQ User Session for public login (aprox 1mil users)

  • October 16, 2015
  • 2 replies
  • 701 views

Hey guys, 

 

Is it advisable to utilize CQ's user session management to handle public login users ? We have a external authentication mechanism, but there is no session handling involved in the authentication. I'm thinking of using CQ's inbuilt functionalities to handle user session. I'm estimating about max 5000 concurrent users across a stickied 4 publisher environment. Would it work ? is it best to write a custom session handler ? 

 

Thanks ! 

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by gopalKa

Are you talking about HTTPSession or just user session? In CQ, this is done client side via cookies. Typically, we use a separate IDP and use protocols like SAML and not store creds in CQ. This is scalable for any number of users.

2 replies

G
gopalKaAccepted solution
Employee
October 16, 2015

Are you talking about HTTPSession or just user session? In CQ, this is done client side via cookies. Typically, we use a separate IDP and use protocols like SAML and not store creds in CQ. This is scalable for any number of users.

A
Anonymous
October 16, 2015

Yup i'm talking about the HTTPsession, we have a external IDP which only does the authentication(sending a userID/password, returns if true/false authenticated) afterwhich we will have to maintain the session with the server. We thinking of using com.adobe.granite.security.user.UserProperties for user sessions, however the implication of that is that for every new unique user authenticated from the IDP, we will have to create a CQ user in order to use the com.adobe.granite.security.user.UserProperties. 

We're looking aprox 1 mil unique cq users and aprox 5000 concurrent users utilizing the http session within CQ across 4 publisher, do you think it will hold ? or should we externalize the session handling ? 

 

Thanks ! 

Terms & ConditionsAccessibility statement

Loading footer...