# SSO autologin integration with BrXM CMS

**URL:** <https://community.bloomreach.com/t/sso-autologin-integration-with-brxm-cms/1463>\
**Category:** Experience Manager (PaaS/OnPrem)\
**Created:** [October 3, 2019, 7:11am UTC](https://community.bloomreach.com/t/sso-autologin-integration-with-brxm-cms/1463 "2019-10-03T07:11:22Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![briansnijders](https://avatars.discourse-cdn.com/v4/letter/b/b5a626/32.png) [@briansnijders](https://community.bloomreach.com/u/briansnijders)\
**Post date:** [October 3, 2019, 7:11am UTC](https://community.bloomreach.com/t/sso-autologin-integration-with-brxm-cms/1463/1 "2019-10-03T07:11:22Z")

</div>

Hi all,

I’m looking for ways to integrate an OpenID based SSO solution properly in the CMS. Now, everything almost runs smoothly, by creating a custom DelegateSecurityProvider linking up with the SSO endpoints to actually obtain a token on (manual) login.

However, for 1) subsequent visits or 2) initial visits to the CMS (having a valid token), I’m building an SSO Servlet Filter to decode/verify my token and, if it is valid, perform an automatic login in the CMS with a given user.

I only see functionality to perform logins when there’s an actual Wicket Session / Wicket context set up etc. However, in my filter (which has to kick in before the Wicket CMS application is firing up) I don’t have a Wicket Session / Wicket context.

Is there a way to actually programmatically perform the login and/or provision credentials to the Wicket Session / Wicket context which is set up after? Or should my filter set all the JEE Principals manually according to what BrXM is expecting. Any pointers?

Thanks,  
Brian

---

<div class="post-metadata">

**Author:** ![bcanvural](https://yyz1.discourse-cdn.com/flex027/user_avatar/community.bloomreach.com/bcanvural/32/235_2.png) [@bcanvural](https://community.bloomreach.com/u/bcanvural)\
**Post date:** [October 3, 2019, 8:57am UTC](https://community.bloomreach.com/t/sso-autologin-integration-with-brxm-cms/1463/2 "2019-10-03T08:57:18Z")

</div>

Hey Brian,

Check out this code sample: [https://github.com/bcanvural/brxm-okta-saml/blob/master/cms/src/main/java/com/github/bcanvural/security/LoginSuccessFilter.java](https://github.com/bcanvural/brxm-okta-saml/blob/master/cms/src/main/java/com/github/bcanvural/security/LoginSuccessFilter.java) . On successful login you can set a specific attribute on the htttpsession which will be taken into account by cms.

---

<div class="post-metadata">

**Author:** ![Ilakkia\_Baskar](https://yyz1.discourse-cdn.com/flex027/user_avatar/community.bloomreach.com/ilakkia_baskar/32/2044_2.png) [@Ilakkia\_Baskar](https://community.bloomreach.com/u/Ilakkia_Baskar)\
**Post date:** [September 1, 2025, 7:50am UTC](https://community.bloomreach.com/t/sso-autologin-integration-with-brxm-cms/1463/3 "2025-09-01T07:50:40Z")

</div>

Hello @briansnijders

Following up on the above comment—could you please let us know if you’ve had a chance to review it? Feel free to reach out if you need any clarification or have further questions; we’re happy to assist.

Best Regards,  
Bloomreach