For SSO Login 'Remember Me' is Re-enabled on User

Jeremy Isett

We're using the Luminate SSO Login method to enable logins on our site: http://open.convio.com/api/#single_sign_on_api.login_method.html.


The login process works fine and users are able to create sessions on all the systems involved.


The problem we're seeing is the Remember Me setting for a user is re-enabled upon an SSO login, even when the 'remember me' option is not selected.


We've tested with many different accounts, browsers and sessions. Each time being sure to turn off the 'Remember Me' option for that user through the admin interface.


On the API request side we've tested sending a range of different values for the remember_me parameter including:

• 0
• false
• False
• a blank value: '...&remember_me=&...'
• And leaving the remember_me parameter off the request completely.

Regardless of the value sent when we check the user account the Remember Me option for that user has been re-enabled.


We don't see this occur when we login through a standard login form on the Luminate platform.


Any guidance or feedback is greatly appreciated.