Is it possible to configure a "fallback auth" mechanism when using X509 Certificate auth, similar to how you can with Kerberos?
Matt
DevOps Cloud (ADM)
Cybersecurity
IT Operations Management
Is it possible to configure a "fallback auth" mechanism when using X509 Certificate auth, similar to how you can with Kerberos?
Matt
you can do this with the dual connector setup, but it is not nice, especially if you use it during SAML federation. And that is an understatement.
See here: https://www.microfocus.com/documentation/access-manager/5.0/admin/b1aqixc9.html
With that setup, you can catch the error if no certificate is present, and based on that error, you can then call a fallback contract.
There is another solution by using an AJAX call to authenticate with a certificate, and then based on the call a fallback contract. I have a custom class for this, but this is of course not officially supported.