ray.deng83

Hi Folks,

I’m developing a custom STS validator in OpenAM. I implemented org.forgerock.openam.sts.rest.token.validator.RestTokenTransformValidator class and the validateToken method as indicated by the documentation (https://backstage.forgerock.com/docs/openam/13.5/dev-guide/#sts-consume-rest-custom-using) and successfully compiled and deployed…[Read more]

Hi Folks,

I have AM as a PEP for IG and I set up a web agent in AM. The authentication and policy authorization was fine. But when I tried to add Not Enforced URI in the agent config page, I never got it work and I have tried all kinds of URLs. Any suggestion? Thanks.

Best,
Le

I was trying to review the source code of OpenAM 13 and hoping to get a sense of how it is working under the hood. However, the fact that the source code is mixing different technologies and project folders during the stages of development making it very difficult to do. For example, I would like to understand how the basic authentication flow…[Read more]

Can I use wildcard in dn matching in OpenDJ?

For example, a user would be like dn: uid=aponce,ou=People,dc=example,dc=com, and I want to use something like dn: uid=*,ou=People,ou=PremeraDEV,dc=visiant,dc=com to find all the users.

Thanks.

Hi there, I’m playing with DS6 and couldn’t find control-panel in bin folder. Is it deprecated in DS6? Thanks.

During the OpenAM 13.5 installation process, I specified using an external configuration data store with an OpenDJ 3.5 instance. The instance was just set up for basic initialization, not with these steps (https://backstage.forgerock.com/docs/openam/13.5/install-guide/#cts-deployment-steps). I suppose when you finished installing OpenAM…[Read more]

Hi Folks,

I’m trying to set up load balancing and high availability with OpenDJ as User Data Store. Here I have some questions.

1. Is replication a different concept in the load balancing and HA context? High availability means that one instance fails, another instance will come into play so that the data is still accessible. Yet, a replication…[Read more]

Hi Folks, I set up a site url with load balancing including two instances of OpenAM. I can login to a sub realm with a url parameter as “ream=realName” with the actual OpenAM url. However, it doesn’t work with the load balance url. It looks like the load balance url doesn’t work with other url parameters such as “service=authenticationChainName“.…[Read more]

Hi there, I’m learning IDM currently and was a little confused by Reconciliation and Synchronization. What are the differences between the two? Thanks.