SessionInfoContext
Provides AM session information and properties. When the "SessionInfoFilter" processes a request, it injects info and properties from the AM session into this context.
Properties
The context is named amSession, and is accessible at ${contexts.amSession}. The context has the following properties:
"asJsonValue()": JsonValueRaw JSON.
"latestAccessTime": instantThe timestamp of when the session was last used. Can be null if the DN is not resident on the SSO token, or if the time cannot be obtained from the session.
"maxIdleExpirationTime": instantThe timestamp of when the session would time out for inactivity. Can be null if the DN is not resident on the SSO token, or if the time cannot be obtained from the session.
"maxSessionExpirationTime": instantThe timestamp of when the session would time out regardless of activity. Can be null if the DN is not resident on the SSO token, or if the time cannot be obtained from the session.
"properties": mapThe read-only map of properties bound to the session. Can be empty, but not null.
The following properties are retrieved:
When
sessionPropertiesin AmService is configured, listed session properties with a value.When
sessionPropertiesin AmService is not configured, all session properties with a value.Properties with a value that are required by IG but not specified by
sessionPropertiesin AmService. For example, when the session cache is enabled, session properties related to the cache are automatically retrieved.
Properties with a value are returned, properties with a null value are not returned.
"realm": stringThe realm as specified by AM, in a user-friendly slash (/) separated format. Can be null if the DN is not resident on the SSO token.
"sessionHandle": stringThe handle to use for logging out of the session. Can be null if the handle is not available for the session.
"universalId": stringThe DN that AM uses to uniquely identify the user. Can be null if it cannot be obtained from the SSO token.
"username": stringA user-friendly version of the username. Can be null if the DN is not resident on the SSO token, or empty if it cannot be obtained from the DN.