Where actual ip of protected application resides in Open IG configuration

This topic has 3 replies, 2 voices, and was last updated 6 years, 10 months ago by Laurent Vaills.

  • Author
    Posts
  • #6421
     vinaycs9
    Participant

    Since DNS entry of application need to be modified to point to IP of OpenIG. When request need to be forwarded to application ,It must use somewhere the actual Ip of application to be protected. Where that Ip resides in configuration of Open IG ??

    #6422
     Laurent Vaills
    Participant

    Hello,

    In the config.json file, you’ll have to declare the field baseURI, that will point to your protected application. You can find a sample config file on https://backstage.forgerock.com/#!/docs/openig/3.1.0/gateway-guide#quickstart-config .

    Regards,
    Laurent

    #6424
     vinaycs9
    Participant

    Hi Laurent ,

    Thanks for your reply.

    Yes I know this field but do you mean that in this field , we need to use IP ( or LB IP) of protected application .
    Actually in tutorial and in the link you provided , URL (“baseURI”:http://www.example.com:8081″) is mentioned and anyway we have already modified the dns entry to point to openig , then in that case , using DNS name instead of IP will not redirect the request from OPENIG to application unless host entry is modified on machine where OPENIG is running in way that dns of application resolves to the actual ip of application.

    #6427
     Laurent Vaills
    Participant

    Hi,

    Yes, you’ll have to use the IP (or load-balancer IP) of the protected application otherwise, as you noticed, that will result in an endless-loop.

    Regards,
    Laurent

Viewing 4 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic.

©2022 ForgeRock - we provide an identity and access platform to secure every online relationship for the enterprise market, educational sector and even entire countries. Click to view our privacy policy and terms of use.

Log in with your credentials

Forgot your details?