On the Home page, click Identity Servers > [cluster name] > Authentication > Classes > Plus icon.
Under General, click Other.
Specify the following details:
|
Field |
Description |
|---|---|
|
Class Name |
The name of the authentication class. For example, RHP or Logging Session. |
|
Java Class Path |
The name of the Java Class Path. For example, com.novell.nidp.authentication.local.UserNameAuthenticationClass. |
Click Plus icon to add a new property and specify the following details:
|
Field |
Description |
|---|---|
|
Property Name |
The name of the property. For example, ShowUser, REQUEST_HEADERS_LDAP_ATTRIBUTE_NAME, REQUEST_HEADERS_KEY_VALUE_SEPARATOR, REQUEST_HEADERS_SEPARATOR |
|
Property Value |
The value of the property. For example, True, requestHeaders, -->, ||. |
Click Save.
On the Home page, click Identity Servers > [cluster name] > Authentication > Methods > Plus icon.
Specify a name to identify the method. Example: RHPMethod
Select RHPClass from Class.
Turn off Identify Users.
Click to select <DEFAULT_USER_STORE> under Select Userstore.
Click Done.
On the Home page, click Identity Servers > [cluster name] > Authentication > Contracts > Plus icon to create a contract.
In Authentication Methods, add RHPMethod at the second or last in the order.
For information about creating a contract, see Configuring Authentication Contracts.
Click Update to update the required Identity Server.
Click Update All to update the required Identity Server Cluster.
On the Home page, click Access Gateways > Edit.
Click Protected Resource for the proxy service with Authentication Procedure (RHPContract).
On the Home page, click Policies.
Select the policy container, then click New.
Specify a name for the policy, select Access Gateway: Identity Injection for the LdapAttribute policy, then click OK.
Update Access Gateways.
The headers will be available in Ldap Attribute (requestHeaders) in format below. This can accessed from virtual attributes to perform modifications on the result.
On the Home page, click Identity Servers > IDP Global Settings > Virtual Attributes > Virtual Attribute.
Click Plus icon to create a virtual attribute. Create a virtual attribute for the requestHeaders using the Advanced: Javascript function. For more information, see Creating a Virtual Attribute.
Sample JavaScript:
'NameIDPolicy=' and returns value of it.
function main(P1){
return getParameter(P1,'NameIDPolicy=');
}
function getParameter(attribute, param){
var str=attribute.substring(attribute.search(param));
return str.substring(param.length,str.search('&'));
}