Table of Contents

NiasAuth

Warning

This authenticator is a legacy authenticator. It is recommended to plan for migrating the authenticator to the new protocol agnostic authenticator architecture. More information about the legacy authenticators can be found here.

Note

Authenticate using Net iD Access server. Typically used by SITHS, EFOS and custom CA clients.

NB! Configuration update that breaks previous configuration. Be sure to verify configuration in current release.

Properties

Name Description Default value Mandatory
successURL Where to redirect the user after successful authentication N/A Yes
mappingProperty Property to use when other user identifier is used than the CN on the issued certificate N/A No
pipeID ID of the pipe to execute after approved NIAS login N/A Yes
loginTemplate Template used when redering UI nias.template No
includeQueryString Should orginal query string be added to the redirect false No
endPoint HTTP/HTTPS location of the NIAS backend server N/A Yes
nias_keystore_ID The keystore to use for mutual TLS with NIAS server N/A No
userMapPipe If using something else than personal number, a pipe can be used to translate user id to pernonal number N/A No
templateVariables Custom config for template rendering N/A Yes

Example Configuration

{
    "id": "niasone",
    "description": "nias",
    "alias": "nias",
    "name": "NiasAuth",
    "configuration": {
        "pipeID": "ecff89d7-7069-4c6c-b086-33d2df6253fd",
        "successURL": "/activateonetouch",
        "endPoint": "https://path to server/ServiceServer",
        "templateVariables": {
            "cancel_href": "/activateonetouch/authenticate/logout/pope/?nextTarget=/activateonetouch/authenticate/nias",
            "methods": [{
                    "title": "netid.messages.buttons.nias_od",
                    "data-toggle-action": "OD"
                },
                {
                    "title": "netid.messages.buttons.nias_sd",
                    "data-toggle-action": "SD"
                }
            ]
        }
    }
}

Requirements

A configured Net iD Access server with known endpoint, and (for some use cases), a SSL keystore for mutual TLS requirements.

Authentication Deprecated