com.ibm.itim.authentication.mapping

Interface IDMapper

public interface IDMapper

This interface defines the APIs for mapping the authentication user ID to ITIM account user ID. ISIM 6.0 provides a default IDMapper that provides one-to-one mapping between the authentication user and the ITIM account user. The default IDMapper assumes that both users have the same user ID. If you want to support mapping of different user IDs between the authentication user and the ITIM account user, you must provide a class that implements an IDMapper that completes the mapping, You must also register the implementation class. To register the IDMapper implementation class, update the following property in ITIM_HOME/data/enRoleAuthentication.properties file and restart WebSphere Application Server. The ITIM_HOME is the directory where IBM Security Identity Manager is installed. enrole.authentication.idmapper=com.ibm.itim.authentication.mapping.DefaultIDMapper

Since:

6.0

Method Summary

Methods

Modifier and Type	Method and Description
ItimID	mapSubjectToItimID(javax.security.auth.Subject subject) Maps the authenticated user subject to ITIM account user ID and returns the ITIM account user ID.
ItimID	mapUserIDToItimID(java.lang.String userID) Maps the authentication user ID to the ITIM account user ID and returns the ITIM account user ID.

Method Detail

mapSubjectToItimID

ItimID mapSubjectToItimID(javax.security.auth.Subject subject)

Maps the authenticated user subject to ITIM account user ID and returns the ITIM account user ID.

Parameters:

subject - The JAAS subject that represents the authenticated user.

Returns:

The ItimID that is mapped to the user ID that is defined in the JAAS subject.

See Also:

ItimID

mapUserIDToItimID

ItimID mapUserIDToItimID(java.lang.String userID)

Maps the authentication user ID to the ITIM account user ID and returns the ITIM account user ID.

Parameters:

userID - The user ID that represents the authenticated user.

Returns:

The ITIM account user ID that is mapped to the specified userID.

See Also:

ItimID