The Secure Token Handler is a special Handler that create a token for each request and send it to the protected application. The real user identifier is stored in a Memcached server and the protected application can the request the Memcached server to get user identifier.
This mechanism allow one to do <abbrtitle="Single Sign On">SSO</abbr> on application with an unsafe link between Handler and the application, but with a safe link with the Memcached server.
Configure the virtual host like other <ahref="configvhost.html"class="wikilink1"title="documentation:2.0:configvhost">protected virtual host</a> but use Secure Token Handler instead of default Handler.
<liclass="level1"><divclass="li"><strong>Memcached servers</strong>: addresses of Memcached servers, separated with spaces.</div>
</li>
<liclass="level1"><divclass="li"><strong>Token expiration</strong>: time in seconds for token expiration (remove from Memcached server).</div>
</li>
<liclass="level1"><divclass="li"><strong>Attribute to store</strong>: the session key that will be stored in Memcached.</div>
</li>
<liclass="level1"><divclass="li"><strong>Protected URLs</strong>: Regexp of URLs for which the secure token will be sent, separated by spaces</div>
</li>
<liclass="level1"><divclass="li"><strong>Header name</strong>: name of the HTTP header carrying the secure token.</div>
</li>
<liclass="level1"><divclass="li"><strong>Allow requests in error</strong>: allow a request that has generated an error in token generation to be forwarded to the protected application without secure token (default: yes)</div>
</li>
</ul>
<divclass="noteimportant">Due to Handler <abbrtitle="Application Programming Interface">API</abbr> change in 1.9, you need to set these attributes in <code>lemonldap-ng.ini</code> and not in Manager, for example:
