Anonymous_User Absent Member.
Absent Member.
601 views

SSPR 3.0: Pre-populate Challenge/Response for Users via Rest


Hi All,

We are trying to populate NMAS Challenge/Response questions that are
associated with the UP on behalf of users in the Identity Vault and
using the SSPR 3.0 REST interface to do it. Looking at the
https://<ssprip>:<ssprport>/sspr/public/rest.jsp site, i can see there
is a sample showing that this should be possible except when I try to do
it I always get back:

{"error":true,"errorCode":5027,"errorMessage":"You do not have
permission to perform the requested action.","errorDetail":"5027
ERROR_UNAUTHORIZED"}

I am authenticating as the IDV admin when performing the POST and
providing someone else's userID for the username parameter. As a sanity
check, I can successfully set the responses to the challenge questions
if I authenticate as the user when submitting the POST so i know my HTTP
Request is in good shape. I have already tried granting the admin user
explicit rights to the security container in the tree but that didn't
seem to do much.

Does anyone know why the admin user would receive this
ERROR_UNAUTHORIZED? Is there anything particular with NMAS that I have
to configure in order to have the admin user be able to set other users'
responses?

Thanks,
Cristian


--
crisdiaz
------------------------------------------------------------------------
crisdiaz's Profile: https://forums.netiq.com/member.php?userid=3015
View this thread: https://forums.netiq.com/showthread.php?t=49639

0 Likes
1 Reply
Anonymous_User Absent Member.
Absent Member.

Re: SSPR 3.0: Pre-populate Challenge/Response for Users via Rest


Try checking that Settings -> Integration/Developer -> Enable External
Web Services is enabled. Otherwise set set log level to TRACE and
check for any errors there.


--
jrivard
------------------------------------------------------------------------
jrivard's Profile: https://forums.netiq.com/member.php?userid=541
View this thread: https://forums.netiq.com/showthread.php?t=49639

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.