The default login URL (http://opensso-server:port/opensso/UI/Login) accepts several parameters, which can be used to customize the login experience and manage the authentication process.
Authentication module
To specify, which authentication module should be used, use ?module=module_name parameter. The module name corresponds to the "Module Instance Name" at the Access Control / Realm / Authentication tab.
Authentication chain
To specify, which authentication chain should be used to authentication user, use ?service=chain_name parameter. The chain name corresponds to the Authentication Chaining Name at the Access Control / Realm / Authentication tab.
For example, you can configure a authentication chain, which consists of Windows SSO and Active Directory authentication module, name it "AD", and by redirecting user to the http://opensso-server:port/opensso/UI/Login?service=AD URL, user will be automatically logged in with Windows Kerberos credentials, in case the workstation is joined to Windows domain, or the user will be asked for AD username and password.
Authentication realm
If you have multiples realm on the same DNS hostname, you can specify the one you want using ?realm=realm_name. (The default one is /)
Sign up or Log in to add a comment or watch this page.