- ForgeRock Forum and Blog

pankajgoyal0801 started the topic Can I access Salesforce using OpenIG only? in the forum Identity Gateway 5 years, 10 months ago

I want to access Salesforce using OpenIG only. With OpenAM, is it possible?
If Yes, then please help !!
pankajgoyal0801 started the topic How to get file details (uploaded/downloaded) from OpenIG? in the forum Identity Gateway 5 years, 10 months ago

Whenever a file is uploaded/downloaded, http contains disposition headers additionally.
Does OpenIG decodes that information and avail it to us?

Or, How can I get that information? I need the file attributes like name, extension, size, type, etc.
pankajgoyal0801 replied to the topic Support multiple assets with path as "/" in the forum Identity Gateway 5 years, 10 months ago

Yes. I tried that and it worked !!

Thanks !! :)
pankajgoyal0801 replied to the topic Support multiple assets with path as "/" in the forum Identity Gateway 5 years, 10 months ago

Machine 1 – asset1 (asset1.example.com)
Machine 2 – openig (openig.example.com)

Browser – openig.example.com/asset1 – (Working if I use requestPath match condition)
But if I access openig.example.com/ and I have multiple assets, then I am stuck into that problem.

I am seeing that I can add Alias in Tomcat Conf where openig is deployed. If I add…[Read more]
pankajgoyal0801 replied to the topic Support multiple assets with path as "/" in the forum Identity Gateway 5 years, 10 months ago

How can I use request.uri.host because it will always contain “openig.example.com”?
pankajgoyal0801 started the topic Support multiple assets with path as "/" in the forum Identity Gateway 5 years, 10 months ago

Hi,

I have two assets accessible as below :
1) http://asset1.example.com/
2) http://asset2.example.com/

How can I support these two assets using OpenIG? As there is no path component, I cannot use requestPath match condition in 99-default.json.

I don’t know whether it is possible or not?
pankajgoyal0801 replied to the topic How to authenticate users using non-default chains in an automated manner? in the forum Access Management 6 years, 6 months ago

Thanks to everyone. I got your points.

But I am thinking – why is Authentication Attribute required in Subject’s Profile? Is there any use of it? Why does OpenAM give me an option of modifying it?

Wouldn’t it be good if OpenAM can behave in the following manner :-

1) OpenAM will ask for only the username during login.
2) If it is a valid user,…[Read more]
pankajgoyal0801 replied to the topic How to authenticate users using non-default chains in an automated manner? in the forum Access Management 6 years, 6 months ago

As an example,

Suppose I trust Alice more, so I will allow her to login using only the credentials (DataStore).
But I don’t trust Bob that much, so I want Bob to enter credentials as well as OTP for login (DataStore and HOTP).

Hope this will help.
pankajgoyal0801 replied to the topic How to authenticate users using non-default chains in an automated manner? in the forum Access Management 6 years, 6 months ago

Let me rephrase my question …

Suppose I have two users – Alice and Bob.

I want Alice to authenticate herself using Chain1 (Default) and
I want Bob to authenticate himself using Chain2 (non-default).

What I have to do is:-
1) Select “Chain2” in Authentication Processing Attribute in Bob’s account.
2) Append “&user=bob” to the default login…[Read more]
pankajgoyal0801 started the topic How to authenticate users using non-default chains in an automated manner? in the forum Access Management 6 years, 6 months ago

Let us consider,

There are 2 authentication chains – Chain1 (default) and Chain2.
For every request coming to J2EE Agent, it redirects users to default login URI of OpenAM. That’s fine.

Now, if I want to authenticate users using Chain2.
Manually, I can append “&service=Chain2” to login URI.
But how can I automate this thing?
How can I tell…[Read more]
pankajgoyal0801 started the topic How to authenticate users using non-default chains in an automated manner? in the forum Access Management 6 years, 6 months ago

Let us suppose,

There are 2 authentication chains – Chain1 (default) and Chain2.
For every request coming to J2EE Agent, it redirects users to default login URI of OpenAM. That’s fine.

Now, if I want to authenticate users using Chain2.
Manually, I can append “&service=Chain2” to login URI.
But how can I automate this thing?
How can I tell agent…[Read more]