[FEDIZ-237] Atribute org.apache.fediz.SECURITY_TOKEN NULL after SAML authentication

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Not A Problem
• Affects Version/s: 1.4.5
• Component/s: Plugin
• Labels: FEDIZ SAML tomcat8

Environment

Tomcat 8 

ISAM ( IBM) Webseal

 

FEDIZ 1.4.5

• Assignee: Unassigned
• Reporter: Raj
• Created: 01/Feb/19 14:33
• Updated: 04/Feb/19 11:51
• Resolved: 01/Feb/19 16:14

Description

Hi

Yesterday I raised issue  https://issues.apache.org/jira/browse/FEDIZ-236?filter=-2  regarding FEDIZ plugin for TOMCAT 7 , where in I got a reply stating , it only works for TOMCAT 8. 

I configured the FEDIZ for tomcat 8 and authentication wroks , but I noticed that   session attribute 

org.apache.fediz.SECURITY_TOKEN    value  is NULL . See the attached snapshot . 

 

My requirement is that after authentication FEDIZ sets the ROLE / GROUP name of user in the SESSION or HEADER or TOKEN  which I think can be fetched from  org.apache.fediz.SECURITY_TOKEN    but some how that value is NULL . Can any one tell me if this is a BUG ?? 

Attribute name : org.apache.fediz.SECURITY_TOKEN

Attribute  value : [saml:Assertion: null]