Access Manager Idea Exchange - NetIQ Access Manager

Welcome to NetIQ Access Manager Idea Exchange

This idea exchange is for submitting product enhancement ideas only. If you have a question about the product, please click on the “Discussions” tab above and post your questions there.

2022-07-27

Idea ID: 2873830

option to disable logging "NIDP.****-**-**.xml" in case "Echo To Console" (logging into catalina.out) has been enabled

by kgast in NetIQ Access Manager

2 votes

Labels: Configuration

Status: New Idea
- New Idea on 2022-7-27
- 1 Comment
The NIDP / NESP logs stored at: "/var/opt/novell/nam/logs/idp/nidplogs" are usually not getting used for troubleshooting.Instead the "/var/opt/novell/nam/logs/idp/tomcat/catalina.out" will be used (Echo To Console has to be enabled) As logging into...
- Ideas Id :
2022-07-25

Idea ID: 2873798

Allow "Constant" Attributes configured within an attribute mapping to be used as OAuth Claims

by kgast in NetIQ Access Manager

6 votes

Labels: Other

Status: New Idea
- New Idea on 2022-7-25
- 0 Comments
At the moment only LDAP attributes or virtual attributes can be used with OAuth claims / attributes. The only option is to make use of customer claims which would add an array called claims [] like within the example below ++++++++++++++++++++++...
- Ideas Id :
2022-07-25

Idea ID: 2873797

Add user identification / authentication against configured userstore with OAuth Client Credential flow allowing LDAP attributes within claims

by kgast in NetIQ Access Manager

6 votes

Labels: Integrations

Status: New Idea
- New Idea on 2022-7-25
- 0 Comments
With the current NAM OAuth implementation it is not possible to use user attribute ( like LDAP group membership) within scopes / claims. Only "static" custom claims within a scope can be configured. Other vendors offer this kind of functionality.
- Ideas Id :
2022-07-15

Idea ID: 2873721

Add rfc8628 OAuth 2.0 Device Authorization Grant support

by kgast in NetIQ Access Manager

8 votes

Labels: Integrations

Status: New Idea
- New Idea on 2022-7-15
- 0 Comments
As per RFC The OAuth 2.0 device authorization grant is designed for Internet- connected devices that either lack a browser to perform a user-agent- based authorization or are input constrained to the extent that requiring the user to input text...
- Ideas Id :
2022-07-04

Idea ID: 2873639

Monitoring for Oauth/OpenID connections in NAM

by Arie-jan Oudshoorn in NetIQ Access Manager

3 votes

Labels: Configuration , Integrations

Status: New Idea
- New Idea on 2022-7-4
- 1 Comment
When adding a new oauth/openid client monitoring the connection is rather limited because not everything is shown in the browser or logs. Especially if the client or server is from a different company.
- Ideas Id :
2022-06-21

Idea ID: 2873566

allow openid scopes to be set on an application configuration in NAM rather than being global for all NAM application configuration

by bmrussell in NetIQ Access Manager

2 votes

Labels: Configuration , Integrations

Status: New Idea
- New Idea on 2022-6-21
- 0 Comments
Customer might not be able to change the scope in the remote applications so they could have a situation where the profile scope is needed by more than one application and both the applications require access to the email attribute but what it to map...
- Ideas Id :
2022-05-21

Idea ID: 2873337

OAuth - Activate a role based on ClientID Condition

by PetroF in NetIQ Access Manager

1 votes

Labels: Configuration

Status: New Idea
- New Idea on 2022-5-21
- 0 Comments
When we activate a role in policies, currently we set conditions based on set of Authentications (IDP, Contract...) and/or on Attributes (from LDAP, or other stores)... Authentication Conditions always fail when we activate Roles for the OAuth Access...
- Ideas Id :
2022-05-21

Idea ID: 2873336

Deliver utility to migrate data between different Access Manage flavors

by Sebastijan Sef in NetIQ Access Manager

12 votes

Labels: Configuration , Installation-Deployment

Status: New Idea
- New Idea on 2022-5-21
- 0 Comments
With AM's support for containers more and more customers are looking into migrating existing AM setup to containerized setup. But to do that efficiently we are missing utility that would allow us to migrate configuration between different Access Manage...
- Ideas Id :
2022-05-10

Idea ID: 2873246

AG - Relocate RP Configuration

by PetroF in NetIQ Access Manager

2 votes

Labels: Configuration

Status: New Idea
- New Idea on 2022-5-10
- 0 Comments
The idea is to have a button "move" or "relocate" in the AG - Proxy Service List that will give us the ability to: relocate a Proxy Service from one Reverse proxy to another one. transform a domain base to a path-based. (and vice versa) ...
- Ideas Id :
2022-04-20

Idea ID: 2873066

NAM Risk Based Authentication for WS-Trust

by Yeswanth in NetIQ Access Manager

3 votes

Labels: Configuration , Integrations , Other , Supported Platforms

Status: New Idea
- New Idea on 2022-4-20
- 0 Comments
it seems that we cannot user RBA (Risk Based Authentication Methods) for WS-Trust. Although, most of the application dont use the WS-Trust protocol. Microsoft still does. During these cyber security times, we think we need to fortify on all possible...
- Ideas Id :
2022-04-05

Idea ID: 2872943

Rule Definitions - Improvement in the treatment of strings for HTTP Headers

by jlrodriguez in NetIQ Access Manager

1 votes

Labels: Configuration , Other

Status: New Idea
- New Idea on 2022-4-5
- 1 Comment
When we define a risk rule, if we select HTTP Header, it only allows the condition to be defined by "Equals" "Not equals" "Contains" or "Not contains". When we use it for X-Forwarded-For, these conditions make it difficult to analyze if the source IP...
- Ideas Id :
2022-04-04

Idea ID: 2872925

SAML2 - Automatic and/or scheduled metadata/certificate refresh

by mcurrie in NetIQ Access Manager

4 votes

Labels: Integrations

Status: New Idea
- New Idea on 2022-4-4
- 0 Comments
I have been finding that some service proviiders (especially in the security space) are regularally updating their metadata and/or certificates which is causing problems with NAM (especially the certificates). There are mechanisms now which will allow...
- Ideas Id :
2022-03-17

Idea ID: 2872788

Metadata elements for REFEDS and SIRTFI

by Cbq520 in NetIQ Access Manager

4 votes

Labels: Configuration

Status: New Idea
- New Idea on 2022-3-17
- 0 Comments
As a part of WAYF, EduGain etc. we need to be In compliance to SIRTFI for our users to be able to login and we already see trouble. REF: https://wiki.refeds.org/display/SIRTFI/Guide+for+Federation+Participants To comply to SIRTFI we need to add...
- Ideas Id :
2022-03-04

Idea ID: 2872675

Make OAuth Grant attribute virtual / assign to any user store

by Alan Jasper in NetIQ Access Manager

4 votes

Labels: Configuration

Status: New Idea
- New Idea on 2022-3-4
- 1 Comment
We need the ability to configure OAuth and OIDC with grant revocation as writeable attribute on any user store. This is the attribute that has the default name nidsOAuthGrant. At our major NAM customer we use two user stores, AD and eDirectory, and have...
- Ideas Id :
2022-02-24

Idea ID: 2872612

SP Specific Metadata URLs

by rivey in NetIQ Access Manager

1 votes

Labels: Configuration

Status: New Idea
- New Idea on 2022-2-24
- 2 Comments
There are some applications (IDM's OSP for example) that only support importing metadata from the metadata URL. There are organizations that would prefer not to have all of their SP's using the same signing and encryption certificates. This introduces...
- Ideas Id :
2022-02-03

Idea ID: 2872400

Userinfo endpoint should show only selected attributes.

by ccoltro in NetIQ Access Manager

2 votes

Labels: Configuration , Other

Status: New Idea
- New Idea on 2022-2-3
- 0 Comments
Hi all, NAM 451 / OAuth: 1.Customer has created only an attributeset containing all attributes that can be used for OAuth2 application, same they did for SAML2 2.On the scope they link this selecting the needed attributes, so only a few of...
- Ideas Id :
2022-02-02

Idea ID: 2872380

More speaking Jersey Tracing Error

by ccoltro in NetIQ Access Manager

1 votes

Labels: Other

Status: New Idea
- New Idea on 2022-2-2
- 0 Comments
Hi all, a customer of mine with NAM 5 faced this issue: Some OAuth calls fails with the following error in Catalina.out: <amLogEntry> 2021-12-16T11:11:54.839Z INFO NIDS OAuth *Server responded with a response on thread https-jsse-nio-10.180...
- Ideas Id :
2022-02-02

Idea ID: 2872379

TOTP user self-management

by ccoltro in NetIQ Access Manager

2 votes

Labels: Configuration , Dashboards-Visualization

Status: New Idea
- New Idea on 2022-2-2
- 0 Comments
Hi all, It would be a good feature that user tthat has to replace the connected device with the NAM TOTP could do it indipendently. So for example, a button that wipes out the attribute written in LDAP that could make the user able to re-register...
- Ideas Id :
2022-01-25

Idea ID: 2872319

Need a method for migrating AG appliance to AG service

by BryonQ in NetIQ Access Manager

3 votes

Labels: Configuration

Status: New Idea
- New Idea on 2022-1-25
- 0 Comments
I've worked with several Premium customers recently that would like to migrate from using the AG appliance to the AG service but there is no official way to do this. They have to create an AG service cluster and manually copy the configuration from the...
- Ideas Id :
2021-12-10

Idea ID: 2873139

Enhance error messages / reporting for Access Manager Appliance and Gateway Appliance product registration

by kgast in NetIQ Access Manager

5 votes

Labels: Configuration , Installation-Deployment

Status: New Idea
- New Idea on 2021-12-10
- 2 Comments
The CAF interface at "https://[address]:9443" does not return any useful information. For instance, an error message such us "Invalid Key", "Expired Key", "Connection to Registration Server failed", etc. There is no documentation or log files that...
- Ideas Id :