IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  email address is null in the token

    Posted Mon April 15, 2019 04:52 PM
    Edited by Venkat V Mon April 15, 2019 05:34 PM
    var username = context.get(Scope.REQUEST, "urn:ibm:security:asf:request:token:attribute", "username");
    var emailAddress = context.get(Scope.REQUEST, "urn:ibm:security:asf:request:token:attributes", "emailAddress");

    output from trace log.
    IDMappingExtUtils.traceString("username from existing token: " + username); //returns the username, no issues here
    IDMappingExtUtils.traceString("username from existing token: " + emailAddress ); //returns null

    in the reverse proxy config file, I have the below attributes for eperson under TAM SVC Creds,

    [TAM_CRED_ATTRS_SVC:eperson]
    emailAddress = mail
    mobilenumber = mobile
    username = uid

    Not sure why it is giving the null value for emailAddress.




    ------------------------------
    Venkat
    ------------------------------


  • 2.  RE: email address is null in the token

    Posted Mon April 15, 2019 05:39 PM
    I already tried both  ways, Got the null value for email address.
    urn:ibm:security:asf:request:token:attribute
    urn:ibm:security:asf:request:token:attributes


    ------------------------------
    Venkat
    ------------------------------



  • 3.  RE: email address is null in the token

    Posted Tue April 16, 2019 11:56 AM

    Hello Venkat,

    What type of mapping rule are you trying to access this from?

    If you're using an infomap you'd probably want to get that from the STSUU instead :

    var emailAddress = stsuu.getAttributeContainer().getAttributeValueByName("emailAddress");



    ------------------------------
    JACK YARBOROUGH
    ------------------------------



  • 4.  RE: email address is null in the token

    Posted Wed April 17, 2019 04:58 PM
    Hello Venkat,

    My apologies, there is no STSUU access in the infomap as per the following documentation :
    https://www.ibm.com/support/knowledgecenter/en/SSPREK_9.0.6/com.ibm.isam.doc/config/concept/con_infomap_objects.html

    Are you accessing this infomap directly or are you accessing it via an Access Control Policy?

    ------------------------------
    JACK YARBOROUGH
    ------------------------------



  • 5.  RE: email address is null in the token

    Posted Wed April 17, 2019 05:59 PM
    Hi Jack,

    I am trying to access it using access policy



    ------------------------------
    Venkat
    ------------------------------