Clik here to view.
Dynamic Profiles in OpenAM 13
I recently had cause to play with ‘Dynamic Profiles’ in OpenAMv13. If you don’t know then Dynamic Profile is a realm based configuration setting that can dynamically create a user profile in the...
View ArticleIdentity Disorder Podcast, Episode 1
I’m excited to introduce a new podcast series hosted by Daniel Raskin and myself. The series will focus on (what we hope are!) interesting identity topics, news about ForgeRock, events, and much more....
View ArticleClik here to view.
It’s The Little Things – Authentication Chains
Authentication Chains We have not talked much about OpenAM on the blog. AM has some really great features that make it very simple to use. Perhaps my favourite feature is the authentication chains UI....
View ArticleHow to read and write shared state in the OpenAM Scripted Module
If you’ve used OpenAM for a while, you will probably know that it has a concept of shared state; a map of values that can be passed from one authentication module to the next in an authentication...
View ArticleOpenAM JavaScript Wrapper
OpenAM JavaScript Wrapper A long time ago I started writing an example of a small web application that was using the OpenAM REST APIs. Once working on this task, I realised it was relatively easy to...
View ArticleHow to protect your OpenAM deployment against clickjacking
If you ever seen a security report for one of your web applications, there is a good chance that you have seen a big warning about Clickjacking already. Clickjacking is a certain kind of attack that...
View ArticleForgeRock OpenAM 13 Installation & Configuration
I was asked if I could cut a quick video on the installation and configuration for ForgeRock OpenAM 13. While I had done a similar video on an earlier version of OpenAM and that the procedure by and...
View ArticleClik here to view.
A Quick & Easy Way to Create Test Users in OpenAM
More often then not we need ways to create test users and this isn’t something that we want to spend large amounts of time doing. Helpfully OpenAM comes bundled with a script which can quickly let you...
View ArticleClik here to view.
WS-Federation Custom SP Attribute Mapper in OpenAM
This solution article demonstrates how to setup a WS-Federation Identity Provider and Service Provider (also called Relying Party) in OpenAM with a custom attribute mapper specific to the SP. The...
View ArticleClik here to view.
Agentless Cross Domain Single Sign-on with Session Upgrade
The following wiki link details a ForgeRock configuration that demonstrates how to achieve cross-domain single sign-on with session upgrade, using OpenID Connect. Business Case: One of the primary...
View ArticleClik here to view.
ForgeRock OpenID Connect Quick Start
After several attempts at a very simple client for OpenID Connect, this wiki entry details my latest example of a simple HTML example of a client to talk to OpenID Connect. The entire example is a get...
View ArticleClik here to view.
Multi-factor Authentication with Symantec VIP Enterprise Gateway
Although ForgeRock OpenAM has included multi-factor authentication capability, OpenAM can also integrate with pre-existing solutions such as those from Symantec. This wiki entry details how to...
View ArticleOpenAM Security Advisory #201604
Security vulnerabilities have been discovered in OpenAM components. These issues may be present in versions of OpenAM including 13.0.0, 12.0.x, 11.0.x, 10.1.0-Xpress, 10.0.x, 9.x, and possibly previous...
View ArticleClik here to view.
Federated Authorization Using 3rd Party JWTs
Continuing on the theme of authorization from recent blogs, I’ve seen several emerging requirements for what you could describe as federated authorization using an offline assertion. The offline...
View ArticleClik here to view.
Deploying #OpenAM instances in #Docker
Deploying services with Docker has become pretty popular in the DevOps world (understatement). I want to demonstrate how to deploy an instance of ForgeRock’s OpenAM and OpenDJ using Docker. Essentially...
View ArticleOpenAM Web Policy Agent Security Advisory #201603
A security vulnerability has been discovered in the OpenAM Web Policy Agent. This issue is present in version 4.0.0 of the OpenAM Web Policy Agent. This advisory provides guidance on how to ensure your...
View ArticleClik here to view.
Addendum to ForgeRock Full Stack Configuration – Using ForgeRock OpenIG
This is an extension of an earlier post that demonstrated ForgeRock Full Stack Configuration, comprising OpenDJ, OpenAM and OpenIDM. In here we’ll plug in ForgeRock OpenIG to route traffic to/from...
View ArticleForgeRock OpenAM – Configuring Different Realms to Use Different BaseDNs of...
The short video log that follows was prepared to answer a question raised in the Forum on the ForgeRock Community Website. It’s an easy one on how to configure two separate BaseDNs of a single...
View ArticleClik here to view.
Theming a ForgeRock OpenAM 13 Realm XUI
This blog post was first published @ www.fedji.com, included here with permission. Interested to know how a ForgeRock OpenAM 13 Realm XUI was dressed up like the way it is in the picture below, take a...
View ArticleCustomizing ForgeRock OpenAM 13 XUI Login Page
This blog post was first published @ www.fedji.com, included here with permission. Want to know what files are to be modified behind the hood to change the logo and messages on ForgeRock OpenAM 13 XUI...
View Article
