- ForgeRock Forum and Blog

ray.deng83 changed their profile picture 1 year ago
ray.deng83 started the topic Custom STS Validator in the forum Access Management 1 year, 9 months ago

Hi Folks,

I’m developing a custom STS validator in OpenAM. I implemented org.forgerock.openam.sts.rest.token.validator.RestTokenTransformValidator class and the validateToken method as indicated by the documentation (https://backstage.forgerock.com/docs/openam/13.5/dev-guide/#sts-consume-rest-custom-using) and successfully compiled and deployed…[Read more]
ray.deng83 replied to the topic Not Enforced Url is not working in the forum Identity Gateway 1 year, 9 months ago

Hi Violette,

That makes perfect sense. Thanks for the help!

Best,
Le
ray.deng83 replied to the topic Not Enforced Url is not working in the forum Identity Gateway 1 year, 9 months ago

Hi Violette,

Thanks for the response and clarifying on that. How would you approach this in IG? Say, I have a list of applications, and each application will correspond to one route. For each route, we want to have Not Enforced List of URIs. Thanks.

Best,
Le
ray.deng83 started the topic Not Enforced Url is not working in the forum Identity Gateway 1 year, 9 months ago

Hi Folks,

I have AM as a PEP for IG and I set up a web agent in AM. The authentication and policy authorization was fine. But when I tried to add Not Enforced URI in the agent config page, I never got it work and I have tried all kinds of URLs. Any suggestion? Thanks.

Best,
Le
ray.deng83 started the topic OpenAM 13.0 Source Code Review in the forum Access Management 2 years, 9 months ago

I was trying to review the source code of OpenAM 13 and hoping to get a sense of how it is working under the hood. However, the fact that the source code is mixing different technologies and project folders during the stages of development making it very difficult to do. For example, I would like to understand how the basic authentication flow…[Read more]
ray.deng83 started the topic Wildcard Matching in the forum Directory Services 3 years, 2 months ago

Can I use wildcard in dn matching in OpenDJ?

For example, a user would be like dn: uid=aponce,ou=People,dc=example,dc=com, and I want to use something like dn: uid=*,ou=People,ou=PremeraDEV,dc=visiant,dc=com to find all the users.

Thanks.
ray.deng83 replied to the topic No control-panel in DS6? in the forum Directory Services 3 years, 2 months ago

Bill, got your answer. Thanks very much for the detailed explanation!
ray.deng83 replied to the topic No control-panel in DS6? in the forum Directory Services 3 years, 2 months ago

Thanks Ludo. It was nice meeting you in the Austin event.

Just trying to understand. So this means DS operation in version 6 will rely more on command lines? I just think a GUI-based tool sometimes is convenient. Just curious why the control-panel is discontinued instead of just staying in the package? Also, is there any other GUI-based tool…[Read more]
ray.deng83 started the topic No control-panel in DS6? in the forum Directory Services 3 years, 2 months ago

Hi there, I’m playing with DS6 and couldn’t find control-panel in bin folder. Is it deprecated in DS6? Thanks.
ray.deng83 started the topic OpenDJ CTS Initialization in the forum Access Management 3 years, 4 months ago

During the OpenAM 13.5 installation process, I specified using an external configuration data store with an OpenDJ 3.5 instance. The instance was just set up for basic initialization, not with these steps (https://backstage.forgerock.com/docs/openam/13.5/install-guide/#cts-deployment-steps). I suppose when you finished installing OpenAM…[Read more]
ray.deng83 replied to the topic Authenticating to Sub Realms with Site URL in the forum Access Management 3 years, 4 months ago

Hi grk and scott,

Thanks for the input. I will find a time to test it out. Appreciate your help!

Best,
Le
ray.deng83 replied to the topic Load Balancing and High Availability with OpenDJ in the forum Directory Services 3 years, 4 months ago

Hi Ludo and Andy,

This is very helpful information. I probably need to dig more but thanks for those advice.

Best,
Le
ray.deng83 started the topic Load Balancing and High Availability with OpenDJ in the forum Directory Services 3 years, 4 months ago

Hi Folks,

I’m trying to set up load balancing and high availability with OpenDJ as User Data Store. Here I have some questions.

1. Is replication a different concept in the load balancing and HA context? High availability means that one instance fails, another instance will come into play so that the data is still accessible. Yet, a replication…[Read more]
ray.deng83 started the topic Authenticating to Sub Realms with Site URL in the forum Access Management 3 years, 4 months ago

Hi Folks, I set up a site url with load balancing including two instances of OpenAM. I can login to a sub realm with a url parameter as “ream=realName” with the actual OpenAM url. However, it doesn’t work with the load balance url. It looks like the load balance url doesn’t work with other url parameters such as “service=authenticationChainName“.…[Read more]
ray.deng83 replied to the topic ForgeRock AM Certification in the forum Access Management 3 years, 4 months ago

Hi Scott, when was your first test? And, just curious, how do you know you are the first? Did ForgeRock actually tell you about it? lol
ray.deng83 replied to the topic Difference between Reconciliation and Synchronization in the forum Identity Management 3 years, 5 months ago

This is helpful. Thanks for the quick replies guys!
ray.deng83 started the topic Difference between Reconciliation and Synchronization in the forum Identity Management 3 years, 5 months ago

Hi there, I’m learning IDM currently and was a little confused by Reconciliation and Synchronization. What are the differences between the two? Thanks.
ray.deng83 changed their profile picture 3 years, 5 months ago
ray.deng83 replied to the topic ForgeRock AM Certification in the forum Access Management 3 years, 5 months ago

lol
Is it that difficult to make the paper more “official”? Thanks for the comments anyways.
Load More