Configuring authentication

This section provides a practical introduction to the authentication framework by creating a simple example which demonstrates the various components fitting together. The example of authentication configuring process includes the following steps:

• Configuring password-based authentication.
• Configuring directory-based authentication.
• Configuring a multi-factor authentication (MFA) using SMS/E-mail based OTP.
• Configuring a step-up authentication.

Content provider

The authentication framework overview page shows that authentication configuration is linked to a content provider.

All OpenIAM deployments must have at least one Content provider (CP). CPs are usually created upon installing OpenIAM and it is possible for a deployment to have more than one content provider. Hence, before proceeding, ensure that you have a content provider for the domain you want to secure.

Authentication Policy

Authentication policies are used to define general parameters to control authentication behavior. These include parameters such as:

• Failed authentication count.
• Auto unlock.
• Session token life.

Define an authentication policy as described in the Authentication policy section.