I am using FORM based declarative authentication. I was told that whether or not a session is automatcially created after a success login is container specific. In that case, is there any good strategy to manually enforce the creation of session containing the username right after user login ?
Not necessarily the most efficient but pretty easy is to use a filter to detect requests from logged in users and then create a session and attach the user if is not already there.