Actions
Feature #2295
closed
Optimalization of authentication against end system - perform GET only if "Authentication attr." is checked
Status:
Closed
Priority:
Normal
Assignee:
Roman Kučera
Category:
Authentication / Authorization
Target version:
Start date:
06/04/2020
Due date:
% Done:
100%
Estimated time:
Owner:
Description
Now if you want authenticate against end system. IdM will perform GET operation to find the right authentication attribute and then perform AUTHENTICATE operation.
In system mapping you have the option to check "Authentication attr." for defining that authentication should performed with different attribute then uid.
If you leave this option unchecked which is default behavior then uid is used as authentication attribute. In this case performing GET operation is not necessary.
Add condition to DefaultAccAuthenticator::authenticate line 178 where the get is performed.
The behavior will remain same, only in default behavior the authentication will be faster.
Related issues
Actions