← Back to plugin index

Legacy ID Propagation Adapter
Description

Adapter for a legacy Identity Propagator plugin.

The set of identity propagators that can be configured is limited to those that don't redirect the response and don't require the HTTP request.

The roles made available to the identity propagator are those obtained by the Role Provider plugins configured here. Thus, if no Role Providers are configured, the identity propagator will not get any roles, not even the user's roles from the DB.

Type name
LegacyIdPropagator
Class
com.airlock.iam.authentication.application.configuration.idpropagation.LegacyIdPropagatorConfig
May be used by
One-Shot Target Application Target Application
Properties
Identity Propagator (identityPropagator)
Description
The identity propagator plugin to be used.
Attributes
Plugin-Link
Mandatory
Assignable plugins
Cookie Ticket Identity Propagator HTTP Basic Auth Identity Propagator HTTP Header Identity Propagator HTTP Response Header Identity Propagator Kerberos Identity Propagator (requires Airlock Gateway) NTLM Identity Propagator No Identity Propagator Plain Cookie Identity Propagator SAML Assertion Cookie Identity Propagator Username Cookie Identity Propagator
Condition (condition)
Description
Defines the condition under which the users identity is propagated using the configured identity propagation.
Attributes
Plugin-Link
Optional
Assignable plugins
Account Linking Required Red Flag Condition Active Authentication Method Airlock 2FA Device Deletion Possible Airlock 2FA was used for login (Transaction Approval only) Always False Always True Boolean Condition Cronto Activation Possible Cronto Activation Required Cronto Device Removal Possible Cronto Letter Order Condition Cronto was used for login (Transaction Approval only) CrontoSign Swiss Push Activation Possible Email OTP was used for login (Transaction Approval only) FIDO Credential Removal Possible FIDO was used for login (Transaction Approval only) First Usage of Device Has Cronto Account Has Cronto Device Has Device Token Has Email Address Has FIDO Credential Has Matching Role Has Matrix Card Has OATH OTP Token Has Password Has Suitable Airlock 2FA Device Has Tag Has Vasco OTP Token Has mTAN Activation Letter Has mTAN Token IdP-Initiated SSO Flow On SP Logical AND Logical NOT Logical OR Matching Username Never Migrate Possible New Device Condition Next Authentication Method-based Migration Condition OAuth 2.0 Authorization Code Grant In Progress OIDC prompt=none Condition Password Letter Order Interval Condition Public Self-Service Allowed Condition Red Flag Raised Request Has SSO Ticket Step Activated String Regex Condition User Attribute Is Unique User Identified User Represented Condition Vasco Activation Possible mTAN Number Changed mTAN Number Deletion Possible mTAN Number Registration Possible mTAN was used for login (Transaction Approval only)
Role Providers (roleProviders)
Description
Plugins to determine the roles to propagate. These are only application-specific roles, not the Airlock Gateway (WAF) roles. If nothing is configured, no roles can be propagated.
Attributes
Plugin-List
Optional
Assignable plugins
All User Roles Combining Role Provider Condition-based Role Provider OAuth 2.0 Credential Roles Provider Roles from Password Check SSO Ticket Roles Provider Static Roles String-based Role Provider Tag-based Role Provider Transforming Role Provider
Username Providers (usernameProviders)
Description
Plugins to determine an alternative username to propagate. This username is used as user ID for this identity propagation. The providers are asked to provide an alternative username in configured order. After the first username is supplied, subsequent providers are no longer invoked. If nothing configured, or no provider supplies a username, the user ID of the authenticated user is propagated.

Note that when possible these transformations should be configured in the target application instead. However, if username transformations are configured both here and in the target application, then the transformations defined in the target application will be ignored and the transformations defined here will be applied directly to the technical user ID.

Attributes
Plugin-List
Optional
License-Tags
SubIdentities
Assignable plugins
Context Data Username Provider
Context-Data Providers (contextDataProviders)
Description
Values provided by these value map providers are added to the persistent context-data of the authentee that is created for the identity propagator. They can then be referred to like normal context-data. Providers may overwrite each others values. The order of the list defines the runtime order and therefore influence the resulting data set.
Attributes
Plugin-List
Optional
Assignable plugins
Additional Password Check Attribute Map Airlock 2FA Authentication Data Map Airlock 2FA Login ID Parameter Authentication Data Map Conditional Value Map Provider Context Data Map Edited Context Data Map Generic Session Attribute Value Map Provider HTTP Request Information Map OAuth 2.0 Credential Context Data Map OAuth 2.0 Tokens Map Roles Provider SSI Verification Data Provider SSO Ticket Context Data Provider Script Execution Result Value Map Provider Transaction Approval Parameters Map Transforming Value Map Provider User Identity Map User Passwords Map User Statistics Map Value Provider Map mTAN Token Flow Value Map
Password Attribute Key (passwordAttributeKey)
Description

The optional key by which the password should be retrieved from password steps.

If no key is configured or no password was entered for this key, no password is propagated.

Attributes
String
Optional
Suggested values
PASSWORD
YAML Template (with default values) 

type: LegacyIdPropagator
id: LegacyIdPropagator-xxxxxx
displayName: 
comment: 
properties:
  condition:
  contextDataProviders:
  identityPropagator:
  passwordAttributeKey:
  roleProviders:
  usernameProviders: