Uploaded image for project: 'OpenAM'
  1. OpenAM
  2. OPENAM-8199

Resource based authentication does not work with more than one environment condition

    Details

    • Sprint:
      AM Sustaining Sprint 19, AM Sustaining Sprint 20
    • Support Ticket IDs:

      Description

      To reproduce:

      • Install OpenAM 12.0.2
      • Disable XUI (this step is not required for testing in 13)
      • Install Agent
      • Configure Agent profile Login URL as http://openam.example.com:48080/openam/UI/Login?resource=true
      • Change the Auth Level of more than one module to something specific, say LDAP module and DataStore module to Authentication Level 3
      • Create a Policy with environment condition 'Authentication Level (greater than or equal to) 3'

      When accessing the resource without any previous session, I would expect to be presented a choice between all modules with Authentication Level 3 or higher, in this case LDAP and DataStore.

      Instead, I see the default ldapService chain first. Only after authenticating there, do I see the choice of module.

      I should mention that if the user is previously authenticated and hits this protected resource in a session upgrade scenario, the correct behaviour is seen: no default module, straight to choice screen.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                jonthomas Jonathan Thomas
                Reporter:
                joe.starling Joe Starling
                QA Assignee:
                Filip Kubáň [X] (Inactive)
              • Votes:
                0 Vote for this issue
                Watchers:
                5 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  Time Tracking

                  Estimated:
                  Original Estimate - 0h
                  0h
                  Remaining:
                  Remaining Estimate - 0h
                  0h
                  Logged:
                  Time Spent - 10h
                  10h