search

mitigate-dev / omniauth-openam

This is a ruby gem for omnaiuth providing basic login with OpenAM
MIT License
2 stars 0 forks source link

Custom session attributes from SSOToken in User Hash #2

Closed ismail44 closed 8 years ago

ismail44 commented 8 years ago

Is there a way to request custom session attributes being set by a Post Authentication Processor? For example, we have written a Post Authentication Processor that runs after a successful authentication. It adds several properties to the SSOToken. These values are available when doing an /identity/attributes search, however, you need to ask for them by name (they don't come back by default).

ebeigarts commented 8 years ago

I guess not. How do you ask for them by name? Is there a documentation for this? Anyway, pull requests are welcome.

ismail44 commented 8 years ago

To ask for them you just pass in a query string parameter of attributenames for every parameter you want returned. Pass it in multiple times for every named parameter. Note, this will ONLY give you back what you ask for.

I didn't find it very well documented from ForgeRock, however, I found it deep into one of their message boards. It works, because I am using it now to grab those values, however, I am looking to switch from our home-grown authentication module to OmniAuth and came across your strategy.

Thanks for the reply.

ebeigarts commented 8 years ago

I think we could add additional option for the strategy to support this option :attribute_names, []. Can you create a pull request for this?