RF IDeas Authentication Node
The RF IDeas Authentication Node allows ForgeRock users to integrate their AM instance with RFIDeas smart, physical card reader ("pcProx Plus"); the first part uses a stand-alone java client that updates a ForgeRock named user's record with the hex value of his/her RF ID smart card; the second part then uses said value as part of this Authentication Tree described below.
This document assumes that you already have:
- an AM 6.5+ instance running with a user base configured
- a pcProx or pcProx Plus physical card reader
- installed the Queue Reader Node (https://github.com/javaservlets/QueueReader) and set it's Attribute Name to 'headless'
Configuration in RF IDeas
The first step is to run the RF IDeas stand-alone java client, as described in the Enroll section of the POJO folder at https://github.com/javaservlets/RFIDeas
Installation in ForgeRock
The RF IDeas Auth node is packaged as a jar file; you can either use the maven build tool ('mvn clean install') from the sources here, or use download the pre-built jar from the releases tab at https://github.com/javaservlets/RFIDeas/releases/latest.
You then will need to deploy into the ForgeRock Access Management (AM)6.5+ application WEB-INF/lib folder which is running on a tomcat server.
Configuration in ForgeRock
In a new browser window login into the AM console as an administrator and go to
Realms > Top Level Real > Authentication > Trees.
Add the tree node Success to the canvas.
Add the tree node Queue Reader to the canvas. Fill in the values for a. your message server (note the out of the box value is https://forgerockip.firebaseio.com) b. the number of minutes till the message is expired and c. the value of 'headless'
Add the tree node ** RFIDeas Node** to the canvas. For Attribute Name, use the value 'sunIdentityMSISDNNumber' if you used the default instructions for the RF IDeas POJO. Configure these nodes as shown in this image:
Verification in a browser
Verification on your card reader
- To run the RF IDeas stand-alone java client see the Headless section of the POJO folder at https://github.com/javaservlets/RFIDeas