User Guide

228 Chapter 2: ColdFusion Tags
cflogin
Description
A container for user login and authentication code. ColdFusion runs the code in this tag if a user
is not already logged in. You put code in the tag that authenticates the user and identifies the user
with a set of roles. Used with
cfloginuser tag.
Category
Extensibility tags
Syntax
<cflogin
idletimeout = "value"
applicationToken = "token"
cookieDomain = "domain"
...
<cfloginuser
name = "name"
password = "password-string"
roles = "roles">
...>
</cflogin>
See also
cfloginuser, cflogout, GetAuthUser, IsUserInRole,
Chapter 16, “Securing
Applications,” in Developing ColdFusion MX Applications
History
ColdFusion MX 6.1: Changed behavior: the cflogin variable exists when ColdFusion receives a
request with NTLM or Digest (CFHTTP Negotiated header) authentication information.
ColdFusion MX: Added this tag.
Attributes
Usage
The body of this tag executes only if there is no logged-in user. When using application-based
security, you put code in the body of the
cflogin tag to check the user-provided ID and
password against a data source, LDAP directory, or other repository of login identification. The
body must include a
cfloginuser tag to establish the authenticated user's identity in
ColdFusion.
Attribute Req/Opt Default Description
idletimout Optional 1800 Time interval with no keyboard activity after which
ColdFusion logs the user off. Seconds.
applicationtoken Optional The current
application
name
Unique application identifier. Limits the login validity
to one application, as specified by the
cfapplication
tag.
cookiedomain Optional Domain of the cookie that is used to mark a user as
logged in. Use this attribute to enable a user login
cookie to work with multiple clustered servers in the
same domain.