Skip to content

Wrong XACML configs #1782

Open
Open
@pamodaaw

Description

@pamodaaw

Description:
The configuration that is given in step 7 under "Sample Scenario" in the documentation is not correct. [1]

Given configs:

[[xacml.pip.attribute_designator]]
class = "org.xacmlinfo.xacml.pip.jdbc.KMarketJDBCAttributeFinder"
[xacml.pip.attribute_designator.properties]
DataSourceName = "jdbc/KMARKETUSERDB" 

Required Configs:
Part 1:

[identity.entitlement.policy_point.pip]
attribute_designators = [
  "org.wso2.carbon.identity.entitlement.pip.DefaultAttributeFinder",
  "org.wso2.carbon.identity.application.authz.xacml.pip.AuthenticationContextAttributePIP",
  "org.xacmlinfo.xacml.pip.jdbc.KMarketJDBCAttributeFinder"
]

Part2:

[[identity.entitlement.extension]]
name="org.xacmlinfo.xacml.pip.jdbc.KMarketJDBCAttributeFinder"
[identity.entitlement.extension.properties]
DataSourceName = "jdbc/KMARKETUSERDB"

As of now, there's a limitation of defining the configs at above Part2. It should be updated once the issue wso2/product-is#8450 is resolved
[1] https://is.docs.wso2.com/en/5.10.0/develop/writing-a-custom-policy-info-point/

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions