Re: [Architecture] [IAM] What is our Strategy on Local Account Linking?

2019-04-18 Thread Asela Pathberiya
On Fri, Apr 19, 2019 at 5:21 AM Ruwan Abeykoon wrote: > Hi Johann, > +1 for implementing the use-case. > We need to have a white-board session to capture all the possible cases, > and modules to be touched. > > Can we do this once the release pressure is over? For the prospect, can we > say this

Re: [Architecture] [IAM] What is our Strategy on Local Account Linking?

2019-04-18 Thread Ruwan Abeykoon
Hi Johann, +1 for implementing the use-case. We need to have a white-board session to capture all the possible cases, and modules to be touched. Can we do this once the release pressure is over? For the prospect, can we say this is in our roadmap. Cheers, Ruwan A On Thu, Apr 18, 2019 at 4:45 PM

Re: [Architecture] [IAM] Can't do Step-up Authentication for Untrusted 3rd Party Service Providers

2019-04-18 Thread Johann Nallathamby
+Pulasthi Mahawithana for his input. On Thu, Apr 18, 2019 at 5:56 AM Johann Nallathamby wrote: > In fact the requirement is not only for step-up authentication but also > just to force username/password authentication authentication based on > policy in IS. > > Thanks & Regards, > Johann. > > O

[Architecture] [IAM] What is our Strategy on Local Account Linking?

2019-04-18 Thread Johann Nallathamby
IAM Team, I know we just have a facility to store and manage linked local accounts. However we don't use it anywhere. There have been many customers and/or leads in the past who have requested for this capability for different kinds of requirements and mostly we've provided extensions but never th

Re: [Architecture] [IAM] Can't do Step-up Authentication for Untrusted 3rd Party Service Providers

2019-04-18 Thread Johann Nallathamby
In fact the requirement is not only for step-up authentication but also just to force username/password authentication authentication based on policy in IS. Thanks & Regards, Johann. On Thu, Apr 18, 2019 at 5:32 AM Johann Nallathamby wrote: > IAM Team, > > The requirement is to do step-up authe

[Architecture] [IAM] Can't do Step-up Authentication for Untrusted 3rd Party Service Providers

2019-04-18 Thread Johann Nallathamby
IAM Team, The requirement is to do step-up authentication using adaptive authentication script on IS side for an untrusted 3rd party service provider. What I mean by untrusted is that, we can't rely on the service provider to send LOA values or force authentication requests. It should be governed