How to set isIdentityAssertion to true in the SampleLoginModuleImpl code

Question

I was looking into this sample code.
http://edocs.beasys.com/wles/docs42/dvspisec/examples.html#1054478
In the code, how can I make isIdentityAssertion to true.
How or from where in Client / Webapp can I set the isIdentityAssertion to Options hashmap.
I want to set isIdentityAssertion to true in certain conditions and sometimes not via the client/app
Thanks

Answer 1

In that example the isIdentityAssertion value is determined by code in the SimpleSampleAuthenticationProviderImpl class - which is the actual authentication provider.
The key methods are getLoginModuleConfiguration and getAssertionModuleConfiguration.
   * Create a JAAS AppConfigurationEntry (which tells JAAS
   * how to create the login module and how to use it) when
   * the simple sample authenticator is used to authenticate (vs. to
   * complete identity assertion).
   * @return An AppConfigurationEntry that tells JAAS how to use the simple sample
   * authenticator's login module for authentication.
  public AppConfigurationEntry getLoginModuleConfiguration()
    // Don't pass in any special options.
    // By default, the simple sample authenticator's login module
    // will authenticate (by checking that the passwords match).
    HashMap options = new HashMap();
    return getConfiguration(options);
   * Create a JAAS AppConfigurationEntry (which tells JAAS
   * how to create the login module and how to use it) when
   * the simple sample authenticator is used to complete identity
   * assertion (vs. to authenticate).
   * @return An AppConfigurationEntry that tells JAAS how to use the simple sample
   * authenticator's login module for identity assertion.
  public AppConfigurationEntry getAssertionModuleConfiguration()
    // Pass an option indicating that we're doing identity
    // assertion (vs. authentication) therefore the login module
    // should only check that the user exists (instead of checking
    // the password)
    HashMap options = new HashMap();
    options.put("IdentityAssertion","true");
    return getConfiguration(options);
  }Also, if your client app is a web app, make sure to add this to your web.xml
   <login-config>
      <auth-method>CLIENT-CERT</auth-method>
      <realm-name>Legacy_ThisElementIsIgnored</realm-name>
    </login-config>