As a Portal Administrator - I would like tokens to be used to autologin users instead of storing the password in a cookie.

• Type: Feature Request
• Status: Pending Further Research
• Priority: Minor
• Resolution: Unresolved
• Affects Version/s: None
• Fix Version/s: None
• Component/s: Application Security > Auto Login
• Labels:
  • SME-could-7.2
  • ee-nf

Currently, when a user signs into the portal with the "Remember Me" option checked, the portal stores that user's password in the cookie.

This can be a security risk. Instead, the feature request is to not store the password in the cookie, and use tokens to autologin the user.

This post provides a description of how this might be accomplished.