iovation Integration Kit

Adding device profiling to an authentication page

Instead of using the iovation IdP Adapter to gather the device profile, you can speed up the sign on process by adding the device profiling scripts to an existing authentication adapter.

About this task

These steps describe how to add the device-profiling scripts to the HTML Form Adapter that is included with PingFederate. You can adapt these instructions for any page that meets the criteria listed in Device profiling method.

The authentication page you modify must appear earlier in the sign-on flow than the iovation IdP Adapter.

Steps

  1. Embed the JavaScript files in the page.

    1. Open <pf_install>/pingfederate/server/default/conf/template/html.form.login.template.html for editing.

    2. At the end of the file, above the </body> tag, add the following external script references:

      <script language="javascript" src="../assets/scripts/iovation_adapter_custom.js"></script>
<script language="javascript" src="../assets/scripts/iovation_device_profiling.js"></script>

    3. Save the file.

  2. Optional: Customize the name prefix for the blackbox cookie to suit your environment.

    1. Open <pf_install>/pingfederate/server/default/conf/assets/scripts/iovation_adapter_custom.js for editing.

    2. On the following line, change iovation_bb to a name prefix of your choosing:

      var bbCookieNamePrefix = "iovation_bb";

    3. Save the file.

  3. Optional: Increase the client header buffer size setting on your proxy server. It must be able to accommodate the blackbox HTTP cookies (up to 8KB) as well as any other cookies in your sign-on flow.

  4. Configure your proxy server to pass the user’s IP address to PingFederate through HTTP headers.

    1. In your reverse proxy server configuration, specify a header to store the IP address associated with the request, such as X-Forwarded-For.

    2. In the PingFederate administrator console, go to Security → Incoming Proxy Settings.

    3. In the HTTP Header For Client IP Addresses field, type the header that you specified in step a.

    For more details, Configure incoming proxy settings in the PingFederate documentation.

  5. When you complete the steps in Configuring an adapter instance, follow the instructions to set the Device profiling method and Blackbox cookie name prefix fields accordingly.