Installation guide

Before You Begin Installation
22 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005
Forwarding LDAP User Attributes via HTTP
Headers
The policy agent has the ability to forward LDAP user attribute values via HTTP
headers to end-web applications. The LDAP user attribute values come from the
server side of Sun ONE Identity Server. The policy agent behaves like a broker to
obtain and relay user attribute values to the destination servlets, CGI scripts, or
ASP pages. These applications can in turn use the attribute values to personalize
page content.
This feature is configurable through two properties in the
AMAgent.properties
file. To turn this feature on and off, use the following property from the
AMAgent.properties file:
com.sun.am.policy.am.ldapattribute.mode
This property can be set to one of the following values:
• NONE
• HEADER
• COOKIE
When set to NONE , the agent does not fetch LDAP attributes from the server and
ignores the headerAttributes property. In the other two cases, agents fetch the
attribute.
To configure the attributes that are to be forwarded in the HTTP headers, use the
following property:
com.sun.am.policy.am.headerAttributes
Below is an example section in the AMAgent.properties file, which shows how
this feature is used: