if (!portalFiltered && authenticationConfiguration.isCreateNewSessionOnLogin())
{
ActiveAuthenticationIdentityProvider identityProvider = (ActiveAuthenticationIdentityProvider)
Jetspeed.getComponentManager().getComponent("org.apache.jetspeed.security.activeauthentication.ActiveAuthenticationIdentityProvider");
IdentityToken token = identityProvider.createIdentityToken(username);
saveState(session, token, identityProvider.getSessionAttributeNames());
request.getSession().invalidate();
HttpSession newSession = request.getSession(true);
restoreState(newSession, token);
response.sendRedirect(response.encodeURL(request.getContextPath()
+ "/login/redirector?token=") + token.getToken());
}
else
{
response.sendRedirect(response.encodeURL(request.getContextPath()