Fetching Policy Response Provider Attributes in J2EE Agents

Response provider attributes provide values for attributes in the user profile. An agent can fetch these attributes and then pass them in headers to an application. The application can then use the attributes for customizing pages such as a portal page.

To obtain user-specific information by fetching policy response provider attributes, assign a mode to the policy response provider attributes property and map the policy response provider attributes to be populated under specific names for the currently authenticated user. The following example first demonstrates how to assign the REQUEST_ATTRIBUTE mode for fetching policy response provider attributes and then demonstrates a way to map those attributes:

Assigning a Mode to Policy Response Provider Attributes

com.sun.identity.agents.config.response.attribute.fetch.mode = REQUEST_ATTRIBUTE

The key is the policy response provider attribute name and the value is the name under which that attribute will be made available.

Mapping Policy Response Provider Attributes

com.sun.identity.agents.config.response.attribute.mapping com.sun.identity.agents.config.response.attribute.fetch.mode = REQUEST_ATTRIBUTE com.sun.identity.agents.config.response.attribute.mapping[] =

Using this property for mapping policy response provider attributes, you can specify any number of attributes that are required by the protected application. For example, if the application requires the attributes cn and mail, and it expects these attributes to be available under the names COMMON_NAME and EMAIL_ADDR, then your configuration setting would be as follows:

com.sun.identity.agents.config.response.attribute.mapping[cn] = COMMON_NAME

com.sun.identity.agents.config.response.attribute.mapping[mail] = EMAIL_ADDR