Identifying the operator for custom authentication services
Specify the operator mapping so that a custom authentication service can find the requestor record in your repository and bring values back to Pega Platform.
- Open the service from the navigation panel in Dev Studio by clicking and choosing a service from the instance list, and then navigate to the Service tab.
-
In the
Search filter
field, enter an expression to use to find
and validate the user's distinguished name (DN). Enter the following format:
(
cn=%V
), where
cn
is the user and
%V
is the user ID entered by the person logging in. scans the
characters in user ID and password input, and deletes any characters (such as asterisk,
equals sign, or vertical stroke) that are not allowed by the LDAP specification before
calling the LDAP server. These characters are removed without notifying the user or
rejecting the request. No log messages or error messages appear.
Leave the User name attribute field blank. This field provides backward compatibility with a LDAP integration feature provided in Version 4.To ensure maximum security, during sign-on, Pega Platform scans the characters in userID and password input and deletes any characters (such as asterisk, equals sign, or vertical stroke) that are not allowed by the LDAP specification before calling the LDAP server. These characters are removed without notifying the user or rejecting the request. No log messages or error messages appear.
- Optional: In the Mapping tab, map the naming attributes in the directory
sever that correspond to the operator ID properties to locate a model user. Complete this step only if the custom authentication service identifies a directory server.
- Click the Add item icon, and add three attribute mapping rows.
- In each row, in the Property Name field, enter one of the following properties: .pyOrganization, .pyOrgDivision, and .pyOrgUnit.
- In the Attribute Name field, enter the user attribute in
the directory that relates to the entered operator property, for example,
o,ou, andsn.
-
On the
Custom
tab, in the
Source of operator
credentials
list, select where the operator credentials are stored.
- Use credentials stored in PegaRULES – Only the users whose operator ID records do not have Use external authentication selected are allowed access through this service.
- Use externally stored credentials – Only the users whose operator ID records have Use external authentication selected are allowed access through this service.
- Click Save.
Previous topic Configuring login using a custom authentication service Next topic Configuring login using a Kerberos authentication service