Kabi Patt

Basically, we do not want to use password replay option to log in to backend applications.As per the above-given possibilities, HeaderFilter and CryptoHeaderFilter are one way of communicating authenticated user identity information to backend applications.

Hi Joachim
Thank you for sharing your insight. Few follow up questions on the above…[Read more]

Thank you Brad,
The solution worked !

Kabi

Hi Andy,
The AM version is 6.0.0.4.

This chain is used for Radius authentication and attached to a Radius client. FR does not support authentication for Radius yet.

Thanks,
Kabi

Thank you Scott, Will try the solution you suggested. Currently we wrote IDP-Adapter for this which is really not necessary.

Yes we can check membership check in Adaptive Risk Module. But How will I bring the SP-ID in to this equation ? We have groups meant for specific SP-ID.

Thanks,
Kabi

Thanks Scott for the explanations. My use case is complex and looks like I will end in creating multiple IDPs for each case. Here are my use cases :-

(1) SP1 will use just Kerberos for all users.
(2) SP2 will use Kerberors for all users + 2Fa for user with “SP2-Admin” group .
(3) SP3 will use 2FA for all users.

I don’t see any issues for…[Read more]

I found my mistake. I had kept the .openig file in $TOMCAT_HOME folder instead of $HOME (/root in my case) directory. Once I transferred the .openif directory to $HOME, rest started working as expected. I also moved the app1 specific routing syntax from config.json to routes/01-app-routes.json file for clean separation. I guess config.json meant…[Read more]

Thanks Joachim for quick reply. Yes that condition should be “/app1”.

(1) What is the difference between config.json and route JSON file in “routes” directory ?
(2) Can I put the above said configuration in 01-app1-route.json file with no config.json file ?
(3) my config.json file has following entries, which suppose to show the log in…[Read more]

Hi
I am new to OpenIG. Few questions on the configuration mentioned above.

(1) “baseURI”: “http://1.1.1.1:8080” :- Is this the IP where the target app “www.acme.com” is hosted ?
(2) When to use config.json file vs “../routes/xxx.json” . Can the config.json file be empty ?

Thanks,
Kabi

Hi
I am new to OpenIG. Few questions on the configuration mentioned above.

(1) “baseURI”: “http://1.1.1.1:8080” :- Is this the IP wheretarget app “www.acme.com” is hosted ?
(2) When to use config.json file vs “../routes/xxx.json” . Can the config.json file be empty ?

Thanks,
Kabi

Bill, I am new to the ForgeRock Forum. Is there any way I can search the existing forum for specific topic like OpenDJ or OpenAM ? The search icon on the top menu brings the results beyond forum content.

Kabi

Thank you Bill,
That strace command was very helpful. I found that the configuration was not complete. I ran the setup again and the issue got resolved.

Thanks,
Kabi

Thank you Peter. I resolved it by upgrading to openam 14 snapshot war file. I did not check the jason response before. Openam 13 has some issues I guess.

Thanks
Kabi