Hi, I am using for my diploma thesis xwiki and i want to authorize users against shibboleth( http://shibboleth.internet2.edu/ ) I know that I must implements XWikiAuthService, but i don't know what the methods do. So, there are three methods public XWikiUser checkAuth(XWikiContext context) throws XWikiException; public void showLogin(XWikiContext context) throws XWikiException; public Principal authenticate(String username, String password, XWikiContext context) throws XWikiException; and which one is called when user come to xwiki? What is the difference between checkAuth and authenticate method? I want to implement lazy sessions, that means, when user click on login, he will be redirected to shibboleth auth provider. The same case is when user want to logout. Now i must to find out, if i need create user logins in database or if it possible to create some session only login. Thanks for reply Jan Kodera