Which script does authorization on multi-sso enabled environment

[Karthik116]

I have enabled multi-sso plugin and doing authentication with an oidc client. I see installation exit scripts like Multi SSO, Multi SSO login, but not sure what attribute does these scripts check for successful login.

I have the access token with me after authentication, i'm stuck at authorization part.

[Alberto Consonn]

Hi,

you should check the function process in the Installation Exit script MultiSSOLogin:

process : function() {
// the request is passed in as a global
var userName = request.getParameter("user_name");
var userPassword = request.getParameter("user_password");
var user = GlideUser;
var authed = user.authenticate(userName, userPassword);
gs.log("Logging using normal DB");
if (authed) {
// it logined with normal DB creds in a multisso environment.
request.getSession().setAttribute("glide.authenticate.multisso.login.method", "db");
SSO_Helper.clearCookie(SNC.SSOUtils.SSOID());
return user.getUser(userName);
}

this.loginFailed();
return "login.failed";
},

If I have answered your question, please mark my response as correct and/or helpful so that others with the same question in the future can find it quickly and that it gets removed from the Unanswered list.

Thank you

Cheers
Alberto

[Karthik116]

Hi Alberto,

Thanks for replying, is this script responsible for only local db authentication or the final check point in the auth process?

my question is, for testing purpose, if i return if(authed) to "admin" it's not allowing inside.

[Alberto Consonn]

It should be responsible for the final check point in the auth process.

[Alberto Consonn]

Any update on this?

If I have answered your question, please mark my response as correct and/or helpful so that others with the same question in the future can find it quickly and that it gets removed from the Unanswered list.

Thank you

Cheers
Alberto