Questions tagged [openam]

OpenAM is an open source access management, entitlements and federation server platform.

OpenAM is the open source authentication, authorization, entitlement and federation software derived from Sun Microsystem's OpenSSO.

OpenAM provides core identity services to simplify the implementation of transparent single sign-on (SSO) as a security component in a network infrastructure. OpenAM provides the foundation for integrating diverse web applications that might typically operate against a disparate set of identity repositories and are hosted on a variety of platforms such as web and application servers.

641 questions
4
votes
1 answer

react + routing + security

I am building a web application with React and react-router and I would like to protect some routes of my React application with an existing external access management infrastructure (OpenAM). I would like to protect the…
zappee
  • 20,148
  • 14
  • 73
  • 129
4
votes
1 answer

OPENAM: How to add information to the "User Information" OAuth2 / OpenID Connect endpoint

I'm using OAuth2 with OpenAM 13. I need my client application to be able to retrieve user information by means the OpenAM "User Information" endpoint. However, I need to add / enhance the information provided to provide custom information in the…
miguelfgar
  • 311
  • 1
  • 3
  • 9
4
votes
2 answers

OpenAM Java EE agent plain text password

In the documentation, it looks like I can set up a plain text password instead of an encrypted one. com.iplanet.am.service.secret When using a plain text password, set this to the password for the agent profile, and leave am.encryption.pwd…
4
votes
1 answer

OpenID Connect - How to retrieve group membership (e.g. isMemberOf) with the userinfo endpoint?

I have OpenID Connect configured in OpenAM (OpenAm is the provider). Now I'm trying to retrieve the group membership of a user via the userinfo endpoint. Authentication was successful and I retrieved the access_token, the id_token and the user…
Dirk Schiffner
  • 123
  • 1
  • 8
4
votes
2 answers

How to setup a load-test with JMeter for performing SP initiated SSO's with SAML

I want to setup a load-test with JMeter for performing SP initiated SSO's using SAMLv2 with a variety of users. This includes posting the required AuthNRequest message to the login URL of the Identity Provider (IDP) but also the credentials…
Martijn B
  • 4,065
  • 2
  • 29
  • 41
4
votes
3 answers

OpenAM/OpenSSO agent for JBoss EAP 6 / JBoss AS 7

I'd like to add the OpenAM/OpenSSO SSO feature to JBoss EAP 6 or JBoss AS 7. This means I must install an SSO Java EE agent on JBoss. Forgerock's OpenAM download page gives the opportunity to get agents for previous versions of JBoss, but new JBoss…
morbac
  • 301
  • 4
  • 16
3
votes
1 answer

Creating a WS-Federation Identity provider using OpenAM

We are trying to implement SSO for our .NET application deployed on Azure. We have been mandated to use openAM as the Idp. I am following instructions @ http://msdn.microsoft.com/en-us/library/gg429779.aspx. Step 3 states creating an Identity…
user179056
  • 604
  • 19
  • 36
3
votes
2 answers

No longer able to access Tomcat Manager after OpenAM J2EE Policy Agent installation

I have installed a tomcat 6 server with a j2ee openam policy agent. After the installation I am unable to access it, I always get redirected to manager/amlogin.html. This did not previously happen so I can only assume it is because of the agent…
Michael Allen
  • 5,712
  • 3
  • 38
  • 63
3
votes
1 answer

How to include the user groups attributes in a SAML login response assertion

I'm using SAML for login into my app, I would like to include the user groups in attributes in the login response assertion. I'm wondering if the login request should specify that the attribute is required, or if this is a configuration that needs…
Shay
  • 326
  • 2
  • 5
3
votes
2 answers

Configure nodejs as SP with passport-saml and OpenAM as IDP

I deployed OpenAM and created hosted IDP. Then I want to configure NodeJs as Service Provider and implement SSO with passport-saml. For this, I have to register my node.js application as a remote service provider. OpenAM deployment url -…
Elvin Valiev
  • 454
  • 6
  • 15
3
votes
1 answer

Has anyone used OpenAM/OpenDJ/OpenIDM suite without using ForgeRock's Support plans?

We are looking to implement an open source identity management system and have identified ForgeRock's stack as the best technology to implement. The high cost of ForgeRock support and its per-User pricing model, however, is a potential roadblock.…
The Cline
  • 171
  • 3
  • 9
3
votes
1 answer

openam - create a user with ssoadm

I have new goal. Be able to create users of openam with ssoadm. I have read the documentation of Openam https://wikis.forgerock.org/confluence/display/openam/ssoadm-identity#ssoadm-identity-create-identity However, I don't know how to create a user…
Rubendob
  • 1,614
  • 3
  • 22
  • 34
3
votes
2 answers

DotNetOpenAuth 2, OAuth.net and Microsoft.OWIN.Security.oAuth

I want to build an application that is independently work with any of the identity providers like(ADFS,OpenAM, oracle identity). My purpose is to validate the login users from any one of the IDP's what ever is configured to implement my SSO. I am…
user2724058
  • 318
  • 5
  • 20
3
votes
1 answer

Integrating OpenAM, tomcat J2EE policy agent with Spring Security-enabled web application

We are trying to do fine-grained authorizations using spring security while having user authentication and coarse-grained authorization using openam policies feature for the application realm. What I mean by coarse-grained is simple URI rules with…
3
votes
1 answer

Wso2 API manager integration with Openam

I'm trying to integrated wso2 api manager in our organization. We are using Open AM as out Single sign on. I tried to search for some documentation for it but couldn't find any for wso2 API manager authentication and possibly authorization piece…
1
2
3
42 43