My Oracle Support Banner

How To Return User Group Information With Ldapfilter In Authorization Or Authentication Headers (Doc ID 2463367.1)

Last updated on SEPTEMBER 22, 2023

Applies to:

Oracle Access Manager - Version 12.2.1.3.0 and later
Information in this document applies to any platform.

Goal

This is more of a "How to" question related to OAM 12c environment

How do we return user group information with ldapfilter in authorization or authentication Headers in OAM 12c ?

Currently we are using $user.groups as response headers but unable to apply ldapfilter

Eg/Scenario:
Let's say user is member of 4 groups
cn=Test1,cn=groups,dc=epa,dc=gov
cn=Test2,cn=groups,dc=epa,dc=gov
cn=Test3,cn=groups,dc=epa,dc=gov
cn=Live1,cn=groups,dc=epa,dc=gov

If I need to return groups starting with Test* , how to do that in OAM 12c ?
If I use $user.groups, it will return all 4 groups.


On OAM 10g side, we handle this using --> obmygroups:ldap:///cn=groups,dc=epa,dc=gov??sub?(cn=Test*)
 

Solution

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Goal
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.