Agentless Cross Domain Single Sign-on with Session Upgrade
The following wiki link details a ForgeRock configuration that demonstrates how to achieve cross-domain single sign-on with session upgrade, using OpenID Connect. Business Case: One of the primary...
View ArticleWS-Federation Custom SP Attribute Mapper in OpenAM
This solution article demonstrates how to setup a WS-Federation Identity Provider and Service Provider (also called Relying Party) in OpenAM with a custom attribute mapper specific to the SP. The...
View ArticleA Quick & Easy Way to Create Test Users in OpenAM
More often then not we need ways to create test users and this isn’t something that we want to spend large amounts of time doing. Helpfully OpenAM comes bundled with a script which can quickly let you...
View ArticleForgeRock OpenAM 13 Installation & Configuration
I was asked if I could cut a quick video on the installation and configuration for ForgeRock OpenAM 13. While I had done a similar video on an earlier version of OpenAM and that the procedure by and...
View ArticleHow to protect your OpenAM deployment against clickjacking
If you ever seen a security report for one of your web applications, there is a good chance that you have seen a big warning about Clickjacking already. Clickjacking is a certain kind of attack that...
View ArticleOpenAM JavaScript Wrapper
OpenAM JavaScript Wrapper A long time ago I started writing an example of a small web application that was using the OpenAM REST APIs. Once working on this task, I realised it was relatively easy to...
View ArticleHow to read and write shared state in the OpenAM Scripted Module
If you’ve used OpenAM for a while, you will probably know that it has a concept of shared state; a map of values that can be passed from one authentication module to the next in an authentication...
View ArticleIt’s The Little Things – Authentication Chains
Authentication Chains We have not talked much about OpenAM on the blog. AM has some really great features that make it very simple to use. Perhaps my favourite feature is the authentication chains UI....
View ArticleIdentity Disorder Podcast, Episode 1
I’m excited to introduce a new podcast series hosted by Daniel Raskin and myself. The series will focus on (what we hope are!) interesting identity topics, news about ForgeRock, events, and much more....
View ArticleDynamic Profiles in OpenAM 13
I recently had cause to play with ‘Dynamic Profiles’ in OpenAMv13. If you don’t know then Dynamic Profile is a realm based configuration setting that can dynamically create a user profile in the...
View Article