rskda.blogg.se - Lastpass mfa

An authentication request will be send to LastPass through the LastPass MFA tree. LastPass MFA tree will search for user email (mail or email attribute) in the data store if email is empty an email address will be generated from user DN.

You can test the LastPass MFA authentication tree by accessing this URL in your browser HERE/openam/XUI/?realm=/#login/&service=LastPass.

Select the Retry Decision Limit and set the Retry Limit to 15.

Add a Retry Decision Limit node and connect it as shown in the image below.

Select the Polling Wait Node and set Seconds To Wait to 4.

Select the LastPass Service Decision node and set the following URL in Login Token Endpoint.

Add 3 nodes: Polling Wait Node, LastPass Service Decision and Success and connect them as shown in the image below.

If you leave it as Default then the Authentication Method will be the one selected by users on their phone.

Select the Authentication Method you'd like to use.

Set the following URL in Authentication Endpoint. Paste the key value from step 4 on LastPass MFA Key.

Select the LastPass Service Initiator node and set the LastPass MFA Key.

Connect them as shown in the image below.

Add 4 tree nodes: Start, Username Collector, LastPass Service Initiator and Failure.

Copy the LastPass MFA Login value by clicking in the green button and save it for later.

Copy the lastpass-openam-auth-node-1.0.jar file on your server: /path/to/tomcat/webapps/openam/WEB-INF/lib.

Installationįollow this steps in order to install the node: This document assumes that you already have an AM 5.5+ instance running with an users base configured. The LastPass MFA Authentication Node allows ForgeRock users to integrate their AM instance to the LastPass MFA authentication services.