IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  IBM Application Gateway Forms Login

    Posted Mon November 30, 2020 06:28 PM
    Hi everybody, I'm testing IBM Application Gateway, I have tested ISAM OIDC login flow and application server headers integration successfully, but when I try application Forms Login integration it seems IBM Application Gateway not doing anything, I'm not seeng errors on Application Gateway Log.
    This is my test application.
    Name: prog8b
    Form action: login

    This is my config.yaml
    This is my test application throuhg Application Gateway

    Does anybody has faced something like this?
    Any clue or suggestion?
    Thanks in advance, Regards.

    ------------------------------
    David Vicenteño
    ------------------------------


  • 2.  RE: IBM Application Gateway Forms Login

    Posted Tue December 01, 2020 02:43 AM
    Correct. IBM Application Gateway does not support forms login, by design, as there is no user registry associated with an IAG configuration.

    ------------------------------
    Shane Weeden
    IBM
    ------------------------------

    Original Message


  • 3.  RE: IBM Application Gateway Forms Login

    Posted Tue December 01, 2020 11:21 AM
    Thank you very much Shane.

    ------------------------------
    David Vicenteño
    ------------------------------

    Original Message


  • 4.  RE: IBM Application Gateway Forms Login
    Best Answer

    Posted Tue December 01, 2020 03:56 AM
    Hi David,

    I think Shane's response is related to Form authentication (to IAG) rather than Form-filling (for SSO).

    We are currently working towards support of "forms-based SSO" but the complete solution will rely on an external credential service which is not yet available.

    There are three options in IAG for retrieving information for populating form fields:
      - static values
      - attribute from user credential
      - retrieve username and password from an external REST API-based "credential service"

    The service referenced above will be available in Verify Access (so that an IAG can get credentials from existing GSO lockbox) and, more strategically, will be available in Verify SaaS.  However, these have not yet been released.  I would estimate next month or so but I cannot give a date commitment.

    It will also be possible (and is possible now) to create your own credential service.  Details on the interface, and sample code, are available here:
    https://iamdevportal.us-east.mybluemix.net/iag/tasks/credential-service

    I hope this helps clarify the current position.

    Jon.

    ------------------------------
    Jon Harry
    Consulting IT Security Specialist
    IBM
    ------------------------------

    Original Message


  • 5.  RE: IBM Application Gateway Forms Login

    Posted Tue December 01, 2020 11:23 AM
    I have it clear now.
    Thank you very much Jon

    ------------------------------
    David Vicenteño
    ------------------------------

    Original Message


Related Content