Identity and access management technical tips
Authorize resource access only if the resource is listed in user’s attribute (multi valued) Use case : Assume the list of allowed resources is stored in user’s attribute “postalAddress” …
How to customize landing page for different user based on user attribute USE CASE : If the value of the userattribute “businessCategory” is YES, redirect the user to “/home/manager.html ” …
USE CASE : How do we get a list of FEDRATION Objects which is using a given certificate. We need this to identify the list of FeDERATION confIguration which needs …
How to display the resource URL the user was trying to accesss in the authorization reject error page INSTRUCTIONS: Create a Variable of type ResourceContext as below. This stores …
USE CASE How can we save custom data into session store during user authentication and access it later during authorization The custom data could be an additional user input captured …
Enhanced Session Assurance with Device DNA The Enhanced Session Assurance feature prevents session hijacking and replay. When you log in, a DeviceDNA™ check is performed to fingerprint the end-user device. …
Policy store Object Types Policy store contains mainly two types of objects : Siteminder objects (legacy objects ) XPS objects. Siteminder objects are legacy objects which include Domain, Agent, User …
Server Command Policy Server can be deployed in a Server Farm configuration, where multiple Policy Server share the same Policy Store. In order to maintain policy data synchronization, Policy Server …
Use Case : Authenticate user with username and PIN (or any other user attribute other than the password). PRE-requisite : A user selected PIN is stored in the user store …
Introduction This scenario helps the CA Single Sign-On security Administrator to replace Administrative UI server’s default self-signed certificate with a certificate signed by a trusted Certificate Authority (CA). A trusted …