Questions tagged [openam]

OpenAM is an open source access management, entitlements and federation server platform.

OpenAM is the open source authentication, authorization, entitlement and federation software derived from Sun Microsystem's OpenSSO.

OpenAM provides core identity services to simplify the implementation of transparent single sign-on (SSO) as a security component in a network infrastructure. OpenAM provides the foundation for integrating diverse web applications that might typically operate against a disparate set of identity repositories and are hosted on a variety of platforms such as web and application servers.

641 questions
1
vote
1 answer

Doing a GET to openAM OAuth redirect URL leads to "Request Not Valid"

I am trying to authenticate my users against OAuth2 module in OpenAM using REST. On trying to consume the module by calling the OpenAM module using Rest Template, OpenAM returns with the request Callback URL which is the redirect URL in openAM i.e.…
1
vote
1 answer

OpenAM exportmetadata giving ERROR: No matching entity metadata found

I had Deployed OpenAM before in my machine and was able to work on it, For Saml Implementation I was using the link : http://localhost:8080/OpenAM-13.0.0/saml2/jsp/exportmetadata.jsp to export the metadata. It was working fine in my machine. But now…
joga
  • 146
  • 13
1
vote
1 answer

localhost hard coded in various files on OpenAM

I’m following open AM (12.0.0) getting started guide (https://backstage.forgerock.com/#!/docs/openam/12.0.0/getting-started) but not able to access the OpenAM login page when I use the server alias name…
Learner
  • 55
  • 5
1
vote
1 answer

Login via Facebook into OpenAM using REST

I am looking forward to integrate logging in users using Facebook's authentication. I have my app protected by OpenAM and the users are already registered there. I have my own login page and would not like to move this to OpenAM and retain it in my…
1
vote
0 answers

OpenAM detect LDAP password expiration

I'm using OpenAM 10.0.1 connected to my LDAP and i would like to detect when the password has expired. If i set the attribute pwdLastSet = 0 on my user in active directory, when i log in with openAM the reason of the error is…
Denis Cucchietti
  • 201
  • 6
  • 16
1
vote
1 answer

Federation using OAuth as protocol and OpenAM as SP

I was wondering if it possible to make OpenID Connection federation with OpenAM. I didn't find anything in this subject and it appears to me that OpenAM allow Federation only for SAML,Liberty ID-FF, and WS-Federation. So is it possible to make…
rsabir
  • 738
  • 1
  • 7
  • 17
1
vote
0 answers

Installing tomcat policy agent throws zip exception

I am trying to install Tomcat policy agent in my machine. I have automated the installation by using --useResponse option. However the installation gets completed but in log file i find the following entries [03/08/2016 11:00:37:168 CET]…
prasanna k
  • 11
  • 1
1
vote
1 answer

Adding Editable Custom Attribute in openAM using CLI

I am trying to add a User Custom attribute in openam and it's embedded opendj. I followed their instructions in link : https://backstage.forgerock.com/#!/docs/openam/12.0.0/dev-guide/chap-custom-attr which involves : Updating Opendj Schema for the…
1
vote
1 answer

OpenAM policy creation issue: could not add/authenticate Groups other than of master realm

While creating OpenAM policy i couldn't find Group from same user store (can see groups in master realm). Realm: / (Top Level Realm) > testRealm Group in masterRealm: masterGroup Group in testRealm: testGroup Users in testGroup: admin Create…
Firos S
  • 11
  • 2
1
vote
1 answer

OpenAM - Use OAuth2 Access Token to get User Details?

Is it possible to get user details (attributes belonging to the resource owner) from ForgeRock's OpenAM using an OAuth 2 access token? I have a trusted SPA UI that is able to get an access token from OpenAM using the Resource Owner Password…
DeejUK
  • 12,891
  • 19
  • 89
  • 169
1
vote
0 answers

Attribute Statement Missing from SAML Response Spring

I am having two issues with Spring SAML, I am a newbie to it but trying to use my common sense to resolve the issue. We have two separate applications that share an external SSO provided as SAAS. Users normally come in from the main portal which…
1
vote
1 answer

OpenDj as backend and accessing through REST API doubts

I'm doing a project using Open Am and OpenDJ as backend, I'm directly calling OpenDJ REST API for profile adding and Editing, I have the following doubts. Is it possible to store JSON in to the OpenDj field? Any size limitation to fields in OpenDj …
Abdul
  • 321
  • 4
  • 22
1
vote
1 answer

OpenAM receives oAuth2 auth code, but doesnt request access token Invalid Session Id

I have implemented my own oAuth2 provider server (using the Grails spring security oAuth2 plugin) and am now trying to connect it to OpenAM. When I try to log in, it redirects properly to my own login form and on succesfull authentication redirects…
OsaSoft
  • 589
  • 5
  • 19
1
vote
1 answer

openam ssoadm setup error: Cannot locate system configuration. Directory Server may be down or configuration directory is invalid

When we run ssoadm setup script ./setup with SSL(HTTPS) enabled as: ./setup --path /configdir/openam --log /configdir/openam/log --acceptLicense /configdir/openam/debug -v ssoadm fails with the following error message: Cannot locate system…
aazeem
  • 844
  • 1
  • 12
  • 23
1
vote
1 answer

OpenAM does not allow login in a realm if using Cross Domain SSO

I have try this to configure login to a specific realm in the Jboss Agent: https://backstage.forgerock.com/#!/docs/openam/12.0.0/admin-guide/chap-realms#realms-agents But it does not work if Cross Domain SSO is enabled. Is this a bug? Or am I doing…