On average I spend a lot of time opening documents online. One set of documents I refer to frequently is the ForgeRock Technical Document set. While it’s not overly arduous to open a browser tab and click on a bookmark or type in the URL, I have wanted to find a better shortcut for this task. […]
I use the command line a lot when interfacing with OpenDJ. One of the issues with this is that I often run into an issue with the BindDN user’s password has an “!” (bang) in it. As this is a special character in Unix/Linux command line, it will typically cause unexpected results. With ldapsearch you […]
OpenIDM 3.1 comes with several password policies enabled by default. There are often times when you will need to implement additional policies or even modify or extend existing policies. This is a quick guide that will walk you through the basics of implementing your own password policies. Let’s talk a little bit about what’s there […]
A customer needed to ensure that passwords contained at least one ‘special character’ when a new password was created in OpenIDM. I borrowed heavily from the provided samples but had to figure out the correct regexp formatting. Here is the function that I used to implement this: function atLeastXSpecialChars(fullObject, value, params, property) { isRequired = […]
Ubuntu is a very popular operating system (OS) in the cloud space but the Federal government has been reluctant to adopt Ubuntu, preferring to stick with Redhat as their Linux flavor of choice. As the Government moves toward the cloud it makes sense to me that Ubuntu would start to see some more play time. One […]
Here is a quick note to help you correctly configure the Scripted SQL Connector when working with different schemas in an Oracle Database. By default the connector assumes that you are querying the default schema, which can be problematic if you happen to be using a different schema (user). The default connector file will look something like […]
Implementing the “Resetting Forgotten Passwords” functionality as described in the OpenAM Developer’s Guide requires some additional custom code. It’s pretty straight forward to implement this functionality and can be done in 4 steps (per the Developer’s Guide): Configure the Email Service Perform an HTTP Post with the user’s id OpenAM looks up email address (based on […]
A client of mine has asked me to assist them in finding a full-time Senior OpenAM Engineer. They are a startup, based in Northern, Virginia. They are working on some pretty cool initiatives with OAUTH2 and SAML and need an experienced engineer to lead this effort. If you are interested in this please feel free […]
Looks like it’s time to start planning for the IDM conference season. There are some great conferences planned and I need to figure out how to start budgeting for some of these. Let me know if I have missed any conferences that should be listed. March: Gartner Identity & Access Management Summit (17 – 18 […]
My son (10) has been asking about VPNs a lot lately. Which I thought was because of all of the news lately about the NSA. I ended up showing him tunnel bear, which he quickly installed on his laptop and iPhone. I complimented my son for his interest in security and gave a wink about […]