IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  concatenate tagvalue headers (ldap fields)

    Posted Tue September 01, 2020 04:48 PM
    Edited by Dmitry Tomko Tue September 01, 2020 04:51 PM
    Hello colleagues,
    i have following question: our ISAM 9.0.7.1 is connected to AD and there are some AD fields: like first name and last name. But I need to present FirstName + LastName as a one "Full Name" and provide it as one header for back-end. It seem HTTP-tag-Values is what I need, but I could provide only one ldap field at time in http-tag-value attributes, but not concatenate them. Is it possible to concatenate them to provide as one header How to do that?
    Is it possible to use transformations to concatenated "tagvalue" ldap fields? Are they presented in the Request object?


  • 2.  RE: concatenate tagvalue headers (ldap fields)

    Posted Wed September 02, 2020 12:26 AM
    Dmitry,

    The easiest way to do this would be to create a HTTP transformation rule on the request which creates the new request header based on the contents of the relevant attributes found in the credential.

    ------------------------------
    Scott Exton
    IBM
    Gold Coast
    ------------------------------

    Original Message


  • 3.  RE: concatenate tagvalue headers (ldap fields)

    Posted Wed September 02, 2020 03:40 AM
    Edited by Dmitry Tomko Wed September 02, 2020 08:44 AM
    Hello Scott,
    thanks for your response, i will try that. Am I right that ldap tagvalue fields already present in request field, i.e. they inserted by isam before transformations?


    ------------------------------

    Original Message


  • 4.  RE: concatenate tagvalue headers (ldap fields)

    Posted Wed September 02, 2020 05:30 AM
    Dmitry,

    You will just need to ensure that the transformation rule is triggered by a POP, rather than the request path.  This will make the credential attributes, as defined by the the 'cred-attr-name' configuration entry, available to the transformation rule.

    Thanks.

    ------------------------------
    Scott Exton
    IBM
    Gold Coast
    ------------------------------

    Original Message


  • 5.  RE: concatenate tagvalue headers (ldap fields)

    Posted Wed September 02, 2020 08:44 AM
    Edited by Dmitry Tomko Wed September 02, 2020 09:13 AM
    Hello Scott, thanks for your response,
    i didn't get what i need to specify in cred-attr-name config entry to make ldap fields visible? Could you help? I want firstname/lastname visible, so that i could work with them in transformation rule.
    Looking at existing AZN_CRED_* headers i don't see firstname/lastname ldap fields that I need.

    [TAM_CRED_ATTRS_SVC:eperson]
    tagvalue_ldap-firstname = firstname
    tagvalue_ldap-lastname = lastname

    [http-transformations]
    add_fullname_header = add_fullname_header_rule

    Am i right that they would not be visible in Headers section, but rather //HTTPRequest/Credential/Attributes section?




    Original Message


Related Content