Option ForceHTTPSLogin

Why Is This Important?

By including Option ForceHTTPSLogin in your config.txt your users will be redirected to a secure login page whenever they try to access EZproxy resources. This security configuration is one step to help keep your server and users' credentials secure.

Option ForceHTTPSLogin is a position-independent config.txt that presents the login page with a secure https protocol at the beginning of the URL. To use this directive, you must configure your EZproxy to use a secure certificate encrypted with SSL (Secure Socket Layer) technology. For details about SSL Configuration, click here.

The directive can be entered as follows:

Option ForceHTTPSLogin

This will cause EZproxy to redirect any requests for the login page to the secure, https URL.

 

To use Option ForceHTTPSLogin, you need to configure EZproxy to listen on a secure port and configure EZproxy to use an SSL certificate. Once you have completed the steps in SSL Configuration, you can enter the following lines in your config.txt to cause EZproxy to redirect to a secure login page whenever a login page is requested:

LoginPortSSL 443
Option ForceHTTPSLogin

These lines can be entered anywhere in your config.txt; however, most institutions enter these statements towards the top along with other EZproxy configuration information to keep these details separate from the database stanzas.

 

The following directives interact with or control functions related to this directive:

LoginPortSSL

Related Concept

SSL Configuration
 

This page last revised: March 2, 2015