[higgins-dev] App and end-user credential handling in idas

[Phil Hunt <phil.hunt@xxxxxxxxxx>]

Jim,

I was looking over the IdAS api and in particular exploring the JNDI test module.  Is it possible to pass both the credential of the application as well as the credential of the user of the application. I notice that IdAS seems to work by using context.open(cred) to authenticate and process operations based on a particular credential. 

Ideally, I'm looking for a way to have both an application credential and a user credential used through the API.  So for example, context.open might be used to open a session context for a particular application.  But a getSubjectAs call might be used to also pass an end-user credential in addition to the application credential authenticated via context.open.  In the case of the JNDI CP it could use the ProxyAuth control to pass the app and the user credential to the LDAP server.

Thanks,

Phil Hunt

Oracle