Configure Re-authentication
In order to utilize the re-authentication feature, the following changes are done to the application:
-
New profile switches are introduced under Console > System Management > Single Sign-On.
Profile switch Type Max length Behavior Default value Enable Re-Authentication
Check box
—
Check this check box to enable the re-authentication fields.
Unchecked
Re-Authentication URL (For example, <protocol>://<host>:<port> / oamreauthenticate?redirect_url=)
Free text
2048
Re-authentication URL of the corporate LDAP system.
Empty
Re-Authentication HTTP Header
Free text
100
Header attribute
OAM_LAST_RE-AUTHENTICATION_TIME
Re-Authentication HTTP Header Date Time Format
Free text
100
Date format
Dy Mon dd hh24:mi:ss TZD yyyy
-
In addition, the following logic is updated for the LDAP settings at a user configuration level: Console > User Configuration Management Changes:
-
LDAP check box is enabled if either LDAP or Enable Re-Authentication is enabled at the system level.
If neither is enabled, the check box is disabled.
-
LDAP Server ID drop-down is disabled and made blank when the Enable Re-Authentication check box is checked.
-
When both Enable Re-Authentication and LDAP details are configured simultaneously, then priority will be given to Re-Authentication feature.
You may skip providing LDAP details when Re-Authentication URL is configured.
-