<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Hi,<br>
<br>
Authentication modules based on Spring Security are not midPoint
functionality per se. It is more like a side effect of midPoint
being based on Spring Security framework. Albeit it is a very
convenient (and often used) side effect, it is not officially
supported midPoint functionality. We sometimes support these modules
for midPoint subscribers - if that was negotiated as part of the
subscription. But they do not have such a broad support as other
midPoint features.<br>
<br>
In midPoint 3.7 we have changed the way how Spring is used in
midPoint. We now follow the annotation-based configuration, which
has its benefits and it also seems to be the future of Spring.
Things like this happen occasionally. We have to continually update
midPoint foundation otherwise its architecture might become
obsolete. That is part of the development process. During midPoint
3.7 development we have converted existing Spring Security
authentication modules from file-based to annotation-based form. But
we have converted only those modules that are used by midPoint
subscribers. I'm sorry, but midPoint is quite a big system now and
we have to prioritize our work.<br>
<br>
Therefore, as always, you have the usual options:<br>
<a class="moz-txt-link-freetext" href="https://wiki.evolveum.com/display/midPoint/I+Need+New+Feature">https://wiki.evolveum.com/display/midPoint/I+Need+New+Feature</a><br>
<br>
<pre class="moz-signature" cols="72">--
Radovan Semancik
Software Architect
evolveum.com
</pre>
<br>
<br>
<div class="moz-cite-prefix">On 04/30/2018 03:50 PM, Marco Benucci
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:eeb621b0-b4fe-3d91-df7a-e38bc1ff18b1@nsr.it">
<meta http-equiv="content-type" content="text/html; charset=utf-8">
<p><font face="DejaVu Sans Mono">Hi,</font></p>
<p><font face="DejaVu Sans Mono">We were running midpoint 3.6.1 in
SSO with openAM using a j2ee agent.<br>
previously, we were able to pass authenticated "name" of the
midpoint user in the header variable "SM_USER" configured in
the ctx-web-security.xml.</font></p>
<p><font face="DejaVu Sans Mono">Now, we update 3.6.1 to 3.7.1
updating the db repository with the appropriate script and
overwriting the war in tomcat/webapps/.</font></p>
<p><font face="DejaVu Sans Mono">Midpoint starts fine, but we
cannot find where to pass header variables.</font></p>
<p><font face="DejaVu Sans Mono">Any suggestions?</font></p>
<p><font face="DejaVu Sans Mono"><br>
</font></p>
<p><font face="DejaVu Sans Mono">Thank you all,</font></p>
<p><font face="DejaVu Sans Mono">Marco</font></p>
<p><font face="DejaVu Sans Mono"><br>
</font></p>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</body>
</html>