1. Proposed title of this feature request

PicketLink should be able to ignore ajax requests

2. Who is the customer behind the request?
Account name: SMABTP
Customer segment:
TAM/SRM customer: no / yes
Strategic Customer yes/no: yes

3. What is the nature and description of the request?

Many application use ajax calls from the browser.
When the session has timed out, picketlink will cause a redirect to the login-server.

There are two issues here:

    the redirect is potentially cross-domain
    the ajax client receives the login page as response for which it is not coded

4. Why does the customer need this? (List the business requirements here)

programming ajax calls that need to go cross-platform is not trivial.

5. How would the customer like to achieve this? (List the functional
requirements here)

The request is to have a configuration switch that detects ajax calls. When such a call would arrive when there is not valid session, the server should not redirect but should send a standard 403

6. For each functional requirement listed in question 5, specify how Red Hat
and the customer can test to confirm the requirement is successfully
implemented.

7. Is there already an existing RFE upstream or in Red Hat bugzilla?

no

8. Does the customer have any specific timeline dependencies?

no

9. Is the sales team involved in this request and do they have any additional input?

no

10. List any affected packages or components.

11. Would the customer be able to assist in testing this functionality if implemented?

yes