Forms-Based Client-Initiated SSO - Some Basic Principals

Further investigation and reading more posts here on DevCentral suggests that the answer to my first question (1) is yes custom javascript is only inserted once form identification has been made.

Therefore to expand upon my second question, does the APM SSO agent scan the HTTP stream sent to the browser or does it wait until all the page components have been loaded?

In the case of the backend Jazz Team Server that I am attempting to log users into, the login form is constructed and attached to the DOM via javascript and I don't seem to be able to identify it by any of the matches available to me (action|order|parameters).

Does anyone have any experience with forms that are similarly constructed?