[email protected]

Hi,

Is there any OpenAM rest point or something which I can use to delete all the existing sessions for the given user (userid)?

Note: I know that we can do by going to OpenAM console but I have a need to do it programatically on some customer’s action.

Thanks,
Anji.

Hi Team,

I have a requirement to expire the individual customer/User’s password after certain period of time. Is there any built-in/out of the box feature in DJ that I can leverage?

E.g. I have a user SAM in my DJ and I want to expire SAM’s password in next two days or after 48 hours so that he will get failure when he try to…[Read more]

Hi,

Right now we have around 15Million records in production and UID is our RDN. But we want to change the RDN from UID to some other GUID attribute. And both of these(UID and GUID) attributes exist and are already populated with the values. So we need to just flip the RDN attribute without affecting any data.

Current: DN:…[Read more]

Is there a good documentation on how AMLB cookie works for stickiness?. We need to configure that on AWS ELB to maintain the stickiness. Please help.

Hi, We want to maintain a file which contains the list of bad passwords that we don’t want our customers to choose. Is there a way to achieve this in OpenDJ? This is not the password history related one which is specific to customer. But this Restricted list should apply basically to all DJ users.

Any help here will be appreciated.

Thanks,
Anji.

Hello all, we are using the forgerock OpenAM Rest APIs for authentication and UserProfile management. We have a requirement to send the encrypted username and encrypted password all the way upto ForgeRock OpenAM. If we do so, is there a way to decrypt username/password before doing the authentication and before it gets stored in the OpenDJ.…[Read more]

Hi, I have created the custom password policy. My requirement is to get different properties of user using REST API /json/users/<username> like “invalidattempts”, “lastlogingtimestamp”, account locked or not locked etc… Is there a way to fetch all this information using OpenAM rest endpoints for any given user in single call?

I am wondering that I am not able to find out any REST API to lock the user account and unlock the user Account manually using the REST APIs. I think there should be feature to be able to lock/unlock the account without really changing the password. Is this intentionally not provided or just was missed out?

We have a use case where we need to…[Read more]

We are using OpenIG policy enforcement filter for policy evaluations. I am under the impression that token would be refreshed when it is touched for policy evaluation but it seems it is not happening. Can you please let me know your thoughts on this? Is this the expected or is Forgerock going to make any changes to this behaviour?

Thanks,
Anji.

We are using OpenIG policy enforcement filter for policy evaluations. I am under the impression that token would be refreshed when it is touched for policy evaluation but it seems it is not happening. Can you please let me know your thoughts on this? Is this the expected or is Forgerock going to make any changes to this behaviour?

Thanks,
Anji.

We are using the stateful sessions. When we call the OpenAM’s token refresh Rest API, idle time is getting reflected/updated but it seems that token is not getting changed on refresh. Isn’t the token supposed to be changed when token is refreshed for its idle time in the backend?

Is that true that in stateful world will we have the same token…[Read more]

We are using the stateful sessions. When we call the OpenAM’s token refresh Rest API, idle time is getting reflected/updated but it seems that token is not getting changed on refresh. Isn’t the token supposed to be changed when token is refreshed for its idle time in the backend?

Is that true that in stateful world, we will have the same token…[Read more]

Is that a good idea to do SSO cross domain using just OpenIG Policy Enforcement Filter without any agent? If so, do we really need CORS to be enabled on openAM?

Hi,

Is there a way to upgrade the existing session token to the given authentication level using any OpenAM Rest end points? In my case, I just want to believe the client and should just change the AuthLevel without doing any real next level authentication?

Please let me know.

Thanks,
Anji.