Uploaded image for project: 'Application Server 7'
  1. Application Server 7
  2. AS7-6220

WebJASPIAuthenticator ignores descriptor roles if GroupPrincipalCallback is not empty

    Details

      Description

      The fix for AS7-5735 introduced a regression in the TCK tests because now the WebJASPIAuthenticator is ignoring the descriptor roles when a non-empty GroupPrincipalCallback is returned from the JASPI authentication.

      The authenticator must add the descriptor roles to the set of roles retrieved from the GroupPrincipalCallback

        Gliffy Diagrams

          Attachments

            Activity

              People

              • Assignee:
                sguilhen Stefan Guilhen
                Reporter:
                sguilhen Stefan Guilhen
              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: