External user mapping

Use the HTTP Callout Mapping Module to invoke a web service to perform the STSUU enrichment and return the modified content back into the flow of the federation.

The HTTP Callout Mapping Module can be optionally used by the runtime during federation mapping operations. The module can call out to external services in one of these formats: XML, JSON, and WS-Trust. The following code shows an example of the JSON configuration data:

{ 
 "uri": "http:mywebserver.com", 
 "sslKeyStore" : "keystore", 
 "autType": "BASIC, NONE, CERTIFICATE", 
 "basicauthusername": "username", 
 "basicauthpassword": "password", 
 "messageFormat":"XML, JSON, WSTRUST", 
 "certKeyStore": "keystore", 
 "certKeyAlias": "keyalias", 
 "issuerUri":"urn:itfim:wstrust:issuer", 
 "appliesTo" : "urn:itfim:wstrust:tamToken", 
 } 

If the message format is WSTRUST, the SOAP body of the message is the XML representation of STSUU. If the message format is XML or JSON, then those formats represent the request body. The response has the same message format of the request.

Parent topic: Advanced authentication methods

Related concepts

• Multiplexing proxy agents
• Switch user authentication
• Reauthentication
• Authentication strength policy (step-up)
• External authentication interface
• Client Certificate User Mapping
• Authenticated User Mapping
• Password strength