chen369

Hi, I’m trying to get OpenIG/OpenAM Authorization with PEP

Heres OpenIG Code,

{
"comment": "OpenAM Authorization check filter",
"name": "OpenAM Authorization",
"type": "PolicyEnforcementFilter",
"config": {
"openamUrl": "http://:8080/openam",
"pepUsername": "policyAdmin",…[Read more]

Hi, I’m trying to get OpenIG/OpenAM Authorization with PEP

Heres OpenIG Code,

{
"comment": "OpenAM Authorization check filter",
"name": "OpenAM Authorization",
"type": "PolicyEnforcementFilter",
"config": {
"openamUrl": "http://:8080/openam",
"pepUsername": "policyAdmin",…[Read more]

Upon Reading logs found this error on OpenAM side,

Error in getExistingValidSSOToken
com.iplanet.sso.SSOException: Invalid session ID.

Could this possibly be why policies are not working ?

@guillaume-sauthier

I’ve amended the amHandler Property but I do not see any additional log statements in OpenIG.

@rajeshr

Hi,Thanks for your Video. I followed your guide step by step. but it did not work for me.

@rajesh-rajasekharan

Hi,Thanks for your Video. I followed your guide step by step. but it did not work for me.

@Rajesh R

Hi,Thanks for your Video. I followed your guide step by step. but it did not work for me.

PRE-PEP Gate Logs

FRI MAR 03 16:35:59 UTC 2017 INFO OpenAM Authentication redirect (and Attributes retrieval) --- iPlanetDirectoryPro cookie found, performing validation
FRI MAR 03 16:35:59 UTC 2017 INFO OpenAM Authentication redirect (and Attributes retrieval) --- Token Validation Response :
FRI MAR 03 16:35:59 UTC 2017 INFO OpenAM…[Read more]