Tagged: Authentication, web policy agent
This topic has 5 replies, 4 voices, and was last updated 4 years, 4 months ago by Peter Major.
-
AuthorPosts
-
December 5, 2016 at 9:05 am #14644
ytheva
ParticipantDo I have the possibility to provide the user multiple authentication options (lets say chains) and to choose what authentication method he prefers?
Scenario:
I have got an application which is protected by the (Apache) web policy agent.
The B2B Portal is used by different user types. For example agents and employees.
The agents should use the 2 Factor authentication chain and the employees the SAML chain.
– URL1: http://xx.xx/openamm/2Factorchain
– URL2: http://xx.xx/openamm/SAMLchainIs it possible to configure OpenAM/Policy Agent to decide on the authentication module or authentication chain depending on the link?
Any idea´s how to handle this scenario with OpenAM and the policy agent?OpenAM 13.5, Web Policy Agent 4.0.1
-
This topic was modified 5 years, 5 months ago by
Peter Major.
December 7, 2016 at 4:53 pm #14697Peter Major
ModeratorWhen working with the agents you can:
* use conditional login URL. In this case the login URL will be determined based on the domain (IIRC) that was accessed.
* use resource based authentication. In this case the authentication method will be determined based on the policies configured for the protected resources.OpenAM can display an authentication selection page if authentication level based authentication is used, but that’s about it. If you need more complex ways, you will probably need to write your own landing page for authentication instead.
December 8, 2016 at 8:38 pm #14740ytheva
ParticipantThanks Peter,
I will look at this topic much in detail…
Thanks for responseJanuary 19, 2018 at 12:29 pm #20614cedric
ParticipantHi Peter,
I am currently trying out OpenAM 13 and cannot seem to find any field within OpenAM to set this agent property com.sun.identity.agents.config.conditional.login.url
Agent in used is a j2ee policy agent.
January 20, 2018 at 10:49 am #20629Andy Cory
ParticipantHi Cedric
This property (strictly it’s a property array) is not yet available in the GUI. To set it, you need to use the ssoadm command line tool.
-Andy
January 23, 2018 at 1:00 pm #20661Peter Major
ModeratorYou can set these properties as free form properties in the UI under the advanced/misc tab of the agent configuration.
-
This topic was modified 5 years, 5 months ago by
-
AuthorPosts
You must be logged in to reply to this topic.