I am building a TAI Interceptor for Websphere 8.5.5.x, the aim is to intercept the request and send it for 2-Factor authentication which will then return a SAML token.
I am doing this by implementing com.ibm.wsspi.security.web.saml.AuthnRequestProvider interface.
From what I understand I just need to ensure that this points the user to 2-Factor site.
When I get the response back it has a SAML Token which I can interrogate using the com.ibm.wsspi.security.web.saml.UserMapping interface. Where I can obtain all the returned attributes in the SAML token.
However I want to use this data to build an LTPA2 token asserting an identity and group membership for use within BPM.
Many thanks for any help
Benjamin