From 3896c68021b2908dd13f914bce16717ab11948f4 Mon Sep 17 00:00:00 2001
From: Michael Wechner <michael.wechner@wyona.com>
Date: Fri, 4 Dec 2015 18:42:34 +0100
Subject: [PATCH] note about pre-authentication parameter added

---
 src/resources/registration/resource.xml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/resources/registration/resource.xml b/src/resources/registration/resource.xml
index f3d8be9f6..edc5584d4 100644
--- a/src/resources/registration/resource.xml
+++ b/src/resources/registration/resource.xml
@@ -32,5 +32,8 @@ User registration
   <property name="administrator-email"/> <!-- INFO: If 'notify-administrator' is set to true, then this property also needs to be set! -->
 
   <property name="administrator-confirmation-required" default-value="false"/> <!-- INFO: If set to true, then user only gets activated when administrator also confirms registration request -->
+
+  <!-- INFO: Also see src/resources/login/resource.xml and src/resources/redirect/resource-v1.0.1.xml -->
+  <property name="pre-auth-request-header"/> <!-- INFO: If set, e.g. 'SM_USER', then the HTTP header will be checked accordingly. Also see http://stackoverflow.com/questions/10148666/how-can-i-trust-that-the-siteminder-http-headers-havent-been-tampered-with -->
 </rtd>
 </resource>