Sometimes submitting the form directly is not sufficient. Forms on
web pages can contain dynamic hidden variables, such as
viewstate for session tracking. This means the form must be
opened, filled out, and submitted, instead of simply submitting a
pre-defined action URL.
This is achievable with the Custom Primer Variables setting. Instead of setting Custom Primer URL to the action of the login form, you set it to the URL of the page that contains the form. Custom Primer Variables is a URL-encoded list of name/value pairs to set on the Custom Primer URL page.
When Custom Primer Variables is set, the Custom Primer URL is fetched, and then the variables specified in Custom Primer Variables are used on the form, and then that form is submitted.
For example, let's say there's a
pleaseLogin.asp page that
checkLogin.asp, and the form contains a dynamic
state that has to be included or
checkLogin.asp will reject the
login. If you set Custom Primer URL to
and set Custom Primer Variables to
pleaseLogin.asp page will be fetched, the form field
User will be set to
Pass will be set to
open&close (note the URL-encoding), and then the form on the
pleaseLogin.asp page will be submitted, going to
This means that if the form on
<input type="hidden" name="sessionstate" value="abc123xyz"/>
then that hidden variable will be submitted along with the rest of the form.
Note: After version
(2012-07-13) the Search Appliance will set the HTTP(S)
for each primer URL to the URL of the previously used primer. So authentication
systems that require
Referers will work. If the first primer URL also
Referer add a primer URL before that so it picks up that
This does not affect the use of
Referer in the main walk.