{
"name": "user-profile-sso",
"condition": "${find(request.uri.path, '^/user-profile-sso')}",
"heap": [
{
"name": "SystemAndEnvSecretStore-1",
"type": "SystemAndEnvSecretStore"
},
{
"name": "AmService-1",
"type": "AmService",
"config": {
"url": "http://am.example.com:8088/openam",
"realm": "/",
"agent": {
"username": "ig_agent",
"passwordSecretId": "agent.secret.id"
},
"secretsProvider": "SystemAndEnvSecretStore-1",
"amHandler": "ForgeRockClientHandler"
}
}
],
"handler": {
"type": "Chain",
"config": {
"filters": [
{
"name": "SingleSignOnFilter",
"type": "SingleSignOnFilter",
"config": {
"amService": "AmService-1"
}
},
{
"name": "UserProfileFilter-1",
"type": "UserProfileFilter",
"config": {
"username": "${contexts.ssoToken.info.uid}",
"userProfileService": {
"type": "UserProfileService",
"config": {
"amService": "AmService-1",
"profileAttributes": [ "employeeNumber", "mail" ]
}
}
}
}
],
"handler": {
"type": "StaticResponseHandler",
"config": {
"status": 200,
"headers": {
"Content-Type": [ "text/html; charset=UTF-8" ]
},
"entity": "username: ${contexts.userProfile.username}
rawInfo: ${contexts.userProfile.rawInfo}"
}
}
}
}
}