How To
ForgeRock Identity Platform
Does not apply to Identity Cloud

How do I configure the Post-Authentication plugin in AM (All versions)?

Last updated Apr 13, 2021

The purpose of this article is to provide information on configuring the post-authentication plugin in AM. You can configure the post-authentication plugin for a realm or a service (authentication chain) depending on who the plugin should apply to.


1 reader recommends this article

Configuring the post-authentication plugin (realm)

You can configure the post-authentication plugin for all users in a specific realm using either the console or ssoadm:

  • Console: navigate to: Realms > [Realm Name] > Authentication > Settings > Post-Authentication Processing > Authentication Post Processing Classes and add the required post-authentication class.
  • ssoadm: enter the following command: $ ./ssoadm set-svc-attrs -s iPlanetAMAuthService -e [realmname] -u [adminID] -f [passwordfile] -a iplanet-am-auth-post-login-process-class=[postAuthClass]replacing [realmname], [adminID], [passwordfile] and [postAuthClass] with appropriate values.

See How do I add multiple attributes with a single ssoadm command in AM (All versions)? for further information on adding multiple classes.

Configuring the post-authentication plugin (authentication chain)

You can configure the post-authentication plugin for a specific authentication chain using either the console or ssoadm:

  • Console: navigate to: Realms > [Realm Name] > Authentication > Chains > [Chain Name] > Settings > Post-Authentication Processing Class and add the required post-authentication class.
  • ssoadm: enter the following command: $ ./ssoadm update-auth-cfg-props -e [realmname] -m [authchain] -u [adminID] -f [passwordfile] -a iplanet-am-auth-post-login-process-class=[postAuthClass]replacing [realmname], [authchain], [adminID], [passwordfile] and [postAuthClass] with appropriate values.

See How do I add multiple attributes with a single ssoadm command in AM (All versions)? for further information on adding multiple classes.

See Also

How do I add multiple attributes with a single ssoadm command in AM (All versions)?

Authentication and Single Sign-On Guide › Configuring Authentication Chains

Authentication and Single Sign-On Guide › Implementing Post-Authentication Plugins

Authentication and Single Sign-On Guide › Creating a Post-Authentication Plugin

Related Training

N/A

Related Issue Tracker IDs

N/A


Copyright and Trademarks Copyright © 2021 ForgeRock, all rights reserved.