Nan

I think you can use OAuth authentication.
https://backstage.forgerock.com/docs/openam/13/admin-guide#configure-social-authn

Thanks for the information.

Your REST calls worked well and much more concise than we currently have. Thank you so much!

Thank you so much! I will test that later today!

OK, here is the full traffic recorded via Postman interceptor. You can import the collection file into Postman.

https://www.dropbox.com/sh/cziw4tvu5x29d6o/AABBiH5Cb3pCNzZzAUOYv-Cia?dl=0

OK, here is the full traffic recorded via Postman interceptor. You can import the collection file into Postman.

https://www.dropbox.com/s/g8lnsptji7dfgkv/OpenAM%20Device%20Flow%20full%20traffic.postman_collection.json?dl=0

We already figured out the postman calls. Thanks for your help. And the in the POST calls, we have to add a JSESSIONID in cookies. The JSESSIONID is captured by Postman interceptor.

We are able to submit the user code and authenticate the user. However, cannot go through the allow call page. Please advise. Thanks.

POST /openam/oauth2/nbcacp-sandbox/device/user?user_code=5LLk4ZGW HTTP/1.1
Host: openam-url
Content-Type: application/x-www-form-urlencoded
Cookie: amlbcookie=01;…[Read more]

Can I send you the postman collections I recorded? Seems I cannot attach files here.

Can you post an example of the rest call? Seems just need to include the iPlanetDirectoryPro in the call. :)

Can you post an example of the rest call?

Thanks, Jake. I did the same thing as you advised. Problem solved!

Thanks Bill. Actually I already read your blog during the troubleshooting. I think I did not enable the account lockout in OpenDJ.

I have:
12) last-login-time-format –
13) lockout-duration 0 s
14) lockout-failure-count 0

in default password policy.

Please…[Read more]

Confirmed working. Thanks.

Can you post the logs?