- ForgeRock Forum and Blog

guy_malachi started the topic Protect your OpenAM from outside access in the forum Access Management 4 years, 4 months ago

Hi,

I’m using OpenAM V13.0 connected to multiple applications with OpenID.
When user is being redirected to OpenAM for login he served by the server which running the OpenAM so he exposed to the login page of the OpenAM too (configuration, management etc..)

How can i protect my OpenAM management site from outside access?

Thanks,
Guy
guy_malachi replied to the topic OpenID fetch userinfo from custom url in the forum Access Management 5 years, 7 months ago

Thanks Peter.
And what if i want to call the userinfo endpoint to retreive the user details but with custom logic (call http request, do manipulation on the response) and then return the answer ?

Thanks,
Guy
guy_malachi started the topic OpenAM clients in the forum Access Management 5 years, 8 months ago

Hi,

I configured a custom authentication module (extends from AMLoginModule).

How can i know which client context is trying to authenticate ? (SAML SP 1, SAML SP2, OPENAM CLIENT 1, OPENID CLIENT 2)

Thanks in advanced,
Guy
guy_malachi replied to the topic What is the session-jwt contains ? in the forum Access Management 5 years, 9 months ago

Hi Peter thanks for your answer.
Can you detailed please what does it contain ?
I’ve searched in the references but i couldn’t find anything about it…

Thanks,
Guy
guy_malachi replied to the topic Prevent consent page OpenAM 13 in the forum Access Management 5 years, 10 months ago

Than you very much Fernando :)
guy_malachi started the topic Prevent consent page OpenAM 13 in the forum Access Management 5 years, 10 months ago

Hi,

I’m using OpenID with OpenAM v.13 for in house application and i would like to prevent showing the consent page for the user…

I would appreciate any help.

Thanks,
Guy
guy_malachi replied to the topic OpenAM 13 persistent cookie in the forum Access Management 5 years, 10 months ago

Thank you very much Vincent.
Actually i would expect that OpenAM support this option by default.

I saw that OpenAM 8 or 9 supported this option with the persistent cookie module. Am i right ?
guy_malachi replied to the topic Multiple modules in authentication chain in the forum Access Management 6 years, 2 months ago

In addition, when i add options and click save, it shows the options counter to weird number (100), i guess it’s the count of chars in the option…
Can you help ?
guy_malachi started the topic SAML Destination verification failed in the forum Access Management 6 years, 2 months ago

Hi,

I configured my IDP with Absorb LMS system.
SAML request is signed and the destination attribute is not appear in the request.
When my IDP received the request, it throw exception about destination verification failed:

“ERROR: UtilProxySAMLAuthenticator.authenticate: authn request destination verification failed.”

Is it mandatory field in…[Read more]