Layer7 API Management

  • Private Community
Back to discussions
Expand all | Collapse all

OTK User Attribute Look Up Extension

  • 1.  OTK User Attribute Look Up Extension

    Posted Oct 25, 2018 03:51 PM

    Hello 

     

     Can someone provide me info how to modify the policy to retrieve real values from LDAP Identity Provider for OTK User Attribute Look Up Extension.When I hit the /openid/connect/v1/userinfo it give me static profile 'darth'. I tried integrating the LDAP with OTK User Attribute Look Up Extension policy but no luck.

     

    Please help.

     

    Thanks,

    Bhargavi.



  • 2.  Re: OTK User Attribute Look Up Extension

    Broadcom Employee
    Posted Oct 26, 2018 01:36 PM

    Bhargavi,

     

    The policy will need to be crafted so that the values that you pull back from the LDAP are set into the section in the /userinfo branch and the values for each match userinfo.*** context variable so the current.user.attributes context variable will be sent back properly. If you attach your policy please review the XML as the LDAP information will be copied through.

     

     

    Sincerely,

     

    Stephen Hughes

    CA Support



  • 3.  Re: OTK User Attribute Look Up Extension

    Posted Oct 29, 2018 11:44 AM

    Hi Stephen,

    Thanks for the reply.

    I have integrated with LDAP to the OTK attributes policy.

     

    But  MAS response I still see some of the fields it throwing empty.

     

    },
    "isSessionLocked": false,
    "givenName": "",
    "formattedName": "Bammidi",
    "userName": "bhargavibammidi",
    "familyName": "Bammidi",
    "isCurrentUser": true
    }
    GivenName feild is empty and and the formattedname feild is not proving the fullname.
    eventhough I have added the feilds in OTK userattribute lookup policy but still I am not getting the required fields
    Do we need do something from the CA MAS side to populate these attributes?
    Thanks,
    Bhargavi


  • 4.  Re: OTK User Attribute Look Up Extension

    Posted Oct 30, 2018 04:47 PM

    I found a documentation page which I believe is relevant here, it includes instructions for MAS to map fields for identity providers, which I think may be what you need to do in this case if it wasn't done already.

     

    Documentation: Configure MAS Identity - CA Mobile App Services - 1.3 - CA Technologies Documentation 



  • 5.  Re: OTK User Attribute Look Up Extension

    Posted Oct 31, 2018 10:24 AM

    Hi Dustin,

     

    Thanks for the reply.

    we tested with Android app and  getting proper results but not for IOS. its giving empty results for IOS.

    what could be the reason?

     

    Thanks,

    Bhargavi.



  • 6.  Re: OTK User Attribute Look Up Extension

    Broadcom Employee
    Posted Nov 01, 2018 03:54 AM

    Hi Bhargavi, what Mobile SDK version are you using for Android and iOS? I would check if this works with the latest one (1.8.0) if you are not using this already. See for documentation and download: CA Developers, Mobile SDK for CA Mobile API Gateway - CA Technologies 



  • 7.  Re: OTK User Attribute Look Up Extension

    Posted Nov 01, 2018 06:49 PM

    To clarify, do you mean it wasn't mapped previously and after following that documentation, it now works as expected for Android but not yet for iOS?



  • 8.  Re: OTK User Attribute Look Up Extension

    Posted Nov 08, 2018 04:43 AM

    No Dustin,

    We didn't made any changes apart from integrated with LDAP to the OTK User attribute lookup policy.

    My client didn't tested with Android before. 

     

    Thanks,

    Bhargavi



  • 9.  Re: OTK User Attribute Look Up Extension

    Broadcom Employee
    Posted Feb 14, 2019 06:26 PM

    Good afternoon,

     

    Were you able to resolve the issue that you were seeing or do you need additional assistance?

     

    Sincerely,

     

    Stephen Hughes

    Broadcom Support



  • 10.  Re: OTK User Attribute Look Up Extension
    Best Answer

    Posted Feb 19, 2019 04:17 AM

    Hi Stephen,

     

    Issue is resolved now.

    I have added  LDAP query assertion to the policy and set context variables to it.

     

    I have added below fields to  "set context variable userinfo.profile".

     

     "given_name":"${ldap_full_name[1]}",
     "family_name":"${ldap_full_name[0]}",
     "formattedName":"${ldap_full_name[1]} ${ldap_full_name[0]}",
     "nickname":"${ldap_full_name[0]}",
     "employeeID":"${ldap_sap_id}",
     "preferred_username":"${given_username}"

     

    By adding "given_name" in this format mas sdk could able to read the field on both IOS and Android.

     

    Thanks,

    Bhargavi.