- ForgeRock Forum and Blog

[email protected] replied to the topic RADIUS authentication module in the forum Access Management 6 years, 3 months ago

yes, it works :-)
[email protected] replied to the topic OpenAM Security Advisory in the forum Access Management 6 years, 4 months ago

Hi Nicolas,

Thank you :-)

Regards
Stig Sivertsen
[email protected] started the topic OpenAM Security Advisory in the forum General Discussion 6 years, 4 months ago

Hi,

I need to know which known security issues exist for OpenAM 11.0.2.
I’m not able to find a complete list.
It would have been very easy if FR could add a tab called “known security issues” on the download page where the tabs “source” “tools” “war” “zip” are, or a link to a complete list beside the links “Release Notes” and…[Read more]
[email protected] started the topic OpenAM Security Advisory in the forum General Discussion 6 years, 4 months ago

Hi,

I need to know which known security issues exist for OpenAM 11.0.2.
I’m not able to find a complete list.
It would have been very easy if FR could add a tab called “known security issues” on the download page where the tabs “source” “tools” “war” “zip” are, or a link to a complete list beside the links “Release Notes” and…[Read more]
[email protected] replied to the topic SAML and 2FA in the forum Access Management 6 years, 6 months ago

Hi Brad,

Thanks for responding!
I’m using OpenAM as IDP.
Application is hosted externally(cloud) and integrated as IDPinitated SAML 2.0.

Regards
Stig Sivertsen
[email protected] started the topic SAML and 2FA in the forum Access Management 6 years, 6 months ago

Hi,

I trying to enable 2FA to an SAML integrated application externally and single factor internally.
Is this possible?

I’m using OpenAM 11.0.2

Regards
Stig Sivertsen
[email protected] replied to the topic Provision user to an XML file in the forum Identity Management 6 years, 6 months ago

Hi,

I gave up on this. Every time I tried to make modification it stopped working.
I’m trying to see if OpenIDM 3 i better on this.

Regards
Stig Sivertsen
[email protected] replied to the topic Provision user to an XML file in the forum Identity Management 6 years, 6 months ago

Hi,

Forgerock support suggested me to take a look at sample/workflow and this sample works right out of the box. Found it a bit challenging to make modification to this sample but that is probably just because I don’t quite understand how this really works..

Regards
Stig Sivertsen
[email protected] started the topic Provision user to an XML file in the forum Identity Management 6 years, 6 months ago

Hi,

I have only found posts on how to import users into OpenIDM from an XML file.
Is it possible to provision user from OpenIDM to an XML file?
Link to some documentation would be helpful…

Running OpenIDM 2.1.2.

Thanks!
Regards
Stig Sivertsen
[email protected] replied to the topic RADIUS authentication module in the forum Access Management 6 years, 6 months ago

Hi Peter,
Thanks for replying.
Since I posted this question I have learned a few things…

I filed a ticket to Forgerock support and learned the following:
1: Add and configure the RADIUS module.
2: Add e.g an preconfigured LDAP module to a auth. chain.
3: Add the RADIUS module to the same auth. chain.
4: In the auth. chain for the LDAP module,…[Read more]
[email protected] started the topic RADIUS authentication module in the forum Access Management 6 years, 7 months ago

Hi,

We are running OpenAM 11.0.2.

What is the expected behavior of the RADIUS authentication module?

When I set it up and try to login, I first get the OpenAM login and then the RADIUS login.

Isn’t the intention that OpenAM forwards the authentication to the RADIUS server on behalf of the user so that you don’t have to enter username and…[Read more]
[email protected] started the topic Reading JSON from system.properties in the forum Identity Management 6 years, 9 months ago

Hi,

In OpenIDM 2.0.2 I’m reading in the following line from system.properties:
nsb.sync.filter.ldap.groupjson=,”avdnr”:},{“grp”:”tiw”,”ansnr”:,”avdnr”:}]

In my javascript I try to parse it:
var ToJSON = java.lang.System.getProperty(“nsb.sync.filter.ldap.groupjson”);
var objJSON = JSON.parse(ToJSON);

But I only get this error:
: Unexpected…[Read more]
[email protected] started the topic OpenAM 11.0.2 and SAML 2.0 and Attribute Mapper in the forum Access Management 6 years, 9 months ago

I am establishing SAML between IDP(us) and SP(Remote) and need to map idp ids with sp ids.
Is it possible to concatenate a fixed string with an LDAP attribute like this in the attribute mapper?:

spid=”550-000″ + employeeNumber

550-000 is a customer number prefix and employeeNumber is an LDAP attribute.

Thanks

Stig Sivertsen
[email protected] started the topic How to use the policy agent on web server with many domains in the forum Access Management 7 years, 8 months ago

Hi,

I have installed the policy agent on a tomcat server running Enonic CMS with several web domains.
Sirst site was easy to get to work bacause it was the same domain as OpenAM but when I try to add the second website which uses another domain name I only get “invalid session” in the debug log.
I have added this domain to the “Valid goto URL…[Read more]
[email protected] started the topic PA get stuck in browser-loop in the forum Access Management 7 years, 8 months ago

Hi,

I have now setup J2EE agent (3.3.0) on Tomcat 6 and created an J2EE agent in OpenAM (11.0.2). When I try to access the application(Enonic) I get the login page, are able to login but then the browser get stuck in a loop between the policy agent and OpenAM.

Does anyone know what can cause this situation?

Stig Sivertsen