IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Back to discussions
Expand all | Collapse all

ISAM: Advanced configuration for OIDC RP partner to modify /authorize request

  • 1.  ISAM: Advanced configuration for OIDC RP partner to modify /authorize request

    Posted Mon May 06, 2019 10:48 AM
    Hello, 

    We are currently making an integration with a custom OIDC IDP and ISAM will be used as Relying party. 
    in our situation we would need to provide a url parameter to the /kickoff url. For example: /kickoff?method=y
    We want to use the advanced configuration for an OIDC RP partner to parse the url parameter and add an acr_values parameter to the /authorize. This /authorize url is built by ISAM in response to accessing the kickoff url. Is there any documentation available on how to access the acr_values url parameter in an advanced configuration mapping rule?

    Thank you

    ------------------------------
    Sander Meyfroot
    ------------------------------


  • 2.  RE: ISAM: Advanced configuration for OIDC RP partner to modify /authorize request

    Posted Tue May 07, 2019 04:57 AM
    Sander,

    You can easily add "acr_values" request parameter by appending it to the STSUU in the "urn:ibm:SAM:oidc:rp:authorize:req:param" namespace.

    A short snippet of the "authorize" operation:
    if (operation == "authorize") {
  // Build request param for acr_values, supported values:  ["acr_basic", "acr_advanced", "acr_secured"]
  let request_param_acr_values =  "acr_basic";
  IDMappingExtUtils.traceString("OIDCRP_ADV mapping rule(acr_values parameter):\n " + request_param_acr_values + "\n");
  stsuu.addContextAttribute(new Attribute("acr_values", "urn:ibm:SAM:oidc:rp:authorize:req:param", request_param_acr_values));
}​

    Kind regards,

    ------------------------------
    Dries Eestermans
    IS4U
    ------------------------------

    Original Message


Related Content