-
Notifications
You must be signed in to change notification settings - Fork 8
/
Copy pathSSOAuthentication.xml
71 lines (65 loc) · 2.38 KB
/
SSOAuthentication.xml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE sailpoint PUBLIC "sailpoint.dtd" "sailpoint.dtd">
<sailpoint>
<Rule language="beanshell" name="SSO Authentication Template" type="SSOAuthentication">
<Description>
A rule used to perform SSO authentication.
</Description>
<Signature returnType="SailPointObject">
<Inputs>
<Argument name="context">
<Description>
A sailpoint.api.SailPointContext object that can be used to query
the database if necessary.
</Description>
</Argument>
<Argument name="log">
<Description>
The log object associated with the SailPointContext.
</Description>
</Argument>
<Argument name="httpRequest">
<Description>
A javax.servlet.http.HttpServletRequest object containing the SSO
data.
</Description>
</Argument>
</Inputs>
<Returns>
<Argument name="identity Or Link">
<Description>
The Identity or Link that has been authenticated via SSO.
Starting in 6.1 this rule can return either the Identity or
the specific Link that was used to authenticate the user.
Returning the Link is the preferred way as it provides the
exact account back to the server side which can be helpful
when collecting authentication for electronic signatures.
</Description>
</Argument>
</Returns>
</Signature>
<ReferencedRules>
<Reference class="sailpoint.object.Rule" name="Global Rule Library"/>
</ReferencedRules>
<Source>
<![CDATA[
import org.apache.commons.logging.Log;
import org.apache.commons.logging.LogFactory;
import sailpoint.api.SailPointContext;
import org.apache.commons.logging.Log;
import sailpoint.object.TaskResult;
import javax.servlet.http.HttpServletRequest;
//Log mylogger = LogFactory.getLog("rule.SSOAuthentication");
//mylogger.debug("Start SSOAuthentication");
//add the following lines to IIQ Log4j properties file to use this logger
//logger.SSOAuthentication.name=rule.SSOAuthentication
//logger.SSOAuthentication.level=debug
//Available Input Variables
//httpRequest;
//mylogger.debug("End SSOAuthentication");
//return SailPointObject
return null;
]]>
</Source>
</Rule>
</sailpoint>