Addition of extended attributes into a failover cookie

WebSEAL can optionally be configured to place a copy of specified extended attributes from a user credential into a failover authentication cookie. No extended attributes are configured by default. To add extended attributes, add entries to the [failover-add-attributes] stanza in the WebSEAL configuration file. The syntax is:

The attribute_pattern can be either a specific attribute name, or a not case sensitive wildcard expression matching more than one attribute name. For example, to specify all attributes with the prefix tagvalue_, add the following entry:

The order of the stanza entries is important. Rules that appear earlier in the [failover-add-attributes] stanza take priority over those placed later in the stanza. Attributes that do not match any of the wildcard patterns, or are not explicitly specified, are not added to the failover cookie.

Parent topic: Failover authentication configuration