ForgeRock, inWebo ForgeRock AM Custom Module integration
These plugins support the OTP and Push functions of inWebo authentication only.
With regard to the Helium and VA authentication modes, it is also possible to integrate other authentication modes, but further developments are needed for this integration.
Requirements
Building from Source
$ git clone https://github.com/inwebo-tech/plugin-forgerock-am.git
$ cd plugin-forgerock-am
$ ./mvnw clean package
Installation:
Installation inWebo Otp Authenticator Plugin
Installation inWebo Push Authenticator Plugin
⚠️ If you want to install both plugins, be sure to use the same version for the plugins.
1. Installation inWebo Otp Authenticator Plugin
inWebo service configuration:
Log in to the inWebo administration console.
Navigate to the appropriate service view.
Go to
Secure Sites
and click on theDownload a new certificate for the API
button.Remember to set the Certificate
Authentication
option toYes
.Synchronize your forgerock-am login with inWebo login.
Installation:
Copy resource:
BASH$ sudo unzip iw-forgerock-am-otp-*.zip -d /tmp/forgerock-am-opt $ sudo cp /tmp/forgerock-am-opt/edit-webapp/WEB-INF/lib/iw-forgerock-am-otp-*.jar /path/to/tomcat/webapps/openam/WEB-INF/lib/ $ sudo cp /tmp/forgerock-am-opt/edit-webapp/WEB-INF/lib/idp-connector-auth-repackage-1.0.0.jar /path/to/tomcat/webapps/openam/WEB-INF/lib/
CODE$body
restart tomcat.
Configuration:
Go to Admin Console and log in as
amadmin
.Navigate to {REALM}->Authentification->Modules.
Add new module with
inWebo OTP Authenticator
Type.
To test config go tohttp(s)://{OPENAM_HOST}/openam/XUI/#login/&module=inWeboOtpTest
2. Installation inWebo Push Authenticator Plugin
inWebo service configuration:
Log in to the inWebo administration console.
Navigate to the appropriate service view.
Go to
Secure Sites
and click on theDownload a new certificate for the API
button.Remember to set the Certificate
Authentication
option toYes
.Synchronize your forgerock-am login with inWebo login.
Installation:
Copy resource:
BASH$ sudo unzip iw-forgerock-am-push-*.zip -d /tmp/forgerock-am-push $ sudo cp /tmp/forgerock-am-push/edit-webapp/WEB-INF/lib/iw-forgerock-am-push-*.jar /path/to/tomcat/webapps/openam/WEB-INF/lib/ $ sudo cp /tmp/forgerock-am-push/edit-webapp/WEB-INF/lib/idp-connector-auth-repackage-1.0.0.jar /path/to/tomcat/webapps/openam/WEB-INF/lib/
CODE$body
restart tomcat.
Configuration:
Go to Admin Console and log in as
amadmin
.Navigate to {REALM}->Authentification->Modules.
Add new module with
inWebo OTP Authenticator
Type.To test config go to
http(s)://{OPENAM_HOST}/openam/XUI/#login/&module=inWeboPushTest