IBM Security Verify

 View Only
  • 1.  InfoMap and HTTP Method

    IBM Champion
    Posted Mon May 29, 2023 10:41 AM

    Hello Verify Access community.


    We are looking for a way of identifying (from an InfoMap perspective) the HTTP method (GET/POST/HEAD…) of the ISAM Authentication Service URL the user hits.

    We would like to adjust the behavior of one InfoMap based on the type of HTTP Method received.

    If we can't then we would likely go towards the Web Reverse Proxy HTTP Transformation Rule approach.

    Thanks



    ------------------------------
    Sylvain Gilbert
    ------------------------------


  • 2.  RE: InfoMap and HTTP Method

    IBM Champion
    Posted Tue May 30, 2023 02:05 AM

    Hi Sylvain,

    We do some custom authorization based on HTTP method in an Infomap executed via tfim-sso.
    We retrieve the http method with:

    var requestMethod = stsuu.getContextAttributes().getAttributeValuesByNameAndType("method", "urn:ibm:names:ITFIM:oauth:request")[0];
    


    I don't remember that there was any additional config on the Reverse Proxy for that information about the http method to be present in the stsuu.





    ------------------------------
    André Leruitte
    ------------------------------