NoPassword Auth Tree Node

The NoPassword Authentication Node allows ForgeRock users to integrate their AM instance to the NoPassword authentication services.

Project Readme

image alt text

NoPassword Authentication Node

The NoPassword Authentication Node allows ForgeRock users to integrate their AM instance to the NoPassword authentication services. This document assumes that you already have an AM 5.5+ instance running with an users base configured.

Installation

Follow this steps in order to install the node:

  1. Download the jar file from here.
  2. Copy the nopassword-openam-auth-node-1.0.jar file on your server: /path/to/tomcat/webapps/openam/WEB-INF/lib
  3. Restart AM.
  4. Login into NoPassword admin portal and open the Keys menu on the left side. Copy the NoPassword Login value by clicking in the green button and save it for later.

image alt text

  1. Login into AM console as an administrator and go to Realms > Top Level Real > Authentication > Trees.
  2. Click on Add Tree button. Name the tree NoPassword and click Create.

image

  1. Add 4 tree nodes: Start, Username Collector, NoPassword Service Initiator and Failure.
  2. Connect them as shown in the image below.

image

  1. Select the NoPassword Service Initiator node and set the NoPassword Login Key. Paste the key value from step 4 on NoPassword Login Key. Set the following URL https://api.nopassword.com/auth/loginAsync in Authentication Endpoint.
  2. Select the Authentication Method you'd like to use. If you leave it as Default then the Authentication Method will be the one selected by users on their phone.
  3. Add 3 nodes: Polling Wait Node, NoPassword Service Decision and Success and connect them as show in the image below.

image

  1. Select the NoPassword Service Decision node and set the following URL https://api.nopassword.com/auth/checkLoginToken in Login Token Endpoint.
  2. Select the Polling Wait Node and set Seconds To Wait to 4.
  3. Add a Retry Decision Limit node and connect it as show in the image below.

image

  1. Select the Retry Decision Limit and set the Retry Limit to 15.
  2. Save changes.
  3. You can test the NoPassword authentication tree by accessing this URL in your browser https://YOUR_AM_SERVER HERE/openam/XUI/?realm=/#login/&service=NoPassword.
    18 Enter your username and hit enter. NoPassword AM Module will search for user email (mail or email attribute) in the data store if email is empty an email address will be generated from user DN. An authentication request will be send to NoPassword through the AM module. NoPassword will verify you username and key. If everything is correct you should get an authentication request on your phone.

image

Project Information
Partner
Partner
6.0
2018-05-22
openam
authentication
authTreeNode
frank.gasparovic
here
here