Creating securityContext manually after successfull authentication

Question

Hi,
We have a requirement to integrate ADF application with LDAP. We were able to authenticate but we will not get any roles from LDAP. It's just for authentication purpose only.
So we need to get roles from DB using authenticated user id. Is there any way to set the roles to ADF Security context once authenticated and get the roles from DB so that i can access roles easily from any page or object using securitycontext.
Thanks in advance.
Regards,
Satya.

Answer 1

After authentication, there is no place inside the application where you can set the security context. Security context must be set by the authenticator providers registered in weblogic.
See this Re: Creating securityContext manually after successfull authentication
Please provide some details regarding how you are authenticating the users and how you want to pass the authenticated user to weblogic for deriving roles.
As your roles reside in DB, you have two options:
1. Standard approach is to use OVD database adapter, for getting roles.
2. If you don't have OVD, then I will suggest create a custom weblogic MBean authenticator and register it in weblogic security realm as a authentication provider. See this post
In your case, you have done the authentication part already so you just need to set the principals for the subject calling your database logic:
1. Implement AuthenticationProvider interface
2. Implement LoginModule interface and override doLogin method. Inside this method call you custom db logic to fetch roles.
Edited by: Sachin Saxena on Sep 6, 2012 12:26 PM