fesiextensions.properties (deprecated)

The fesiextensions.properties file (deprecated) provides support for Free EcmaScript Interpreter (FESI) JavaScript extensions before Version 5.0 of IVIG. Do not author new extensions using this deprecated architecture.

The fesiextensions.properties file defines built-in and custom FESI extensions required by IBM Verify Identity Governance. FESI is the Free EcmaScript Interpreter, a JavaScript interpreter written in Java™. The FESI interpreter reads this properties file during IBM Verify Identity Governance initialization to set extensions for required Java classes.

The FESI extensions represent regions, or hooks, in IBM Verify Identity Governance where the use of JavaScript code is allowed to introduce built-in or custom business logic. FESI extensions are specified with a property key and value pair format:

property-key-name=value

The value is a fully qualified Java class file name. The property-key-name includes a standard prefix (fesi.extension), a context, and (for custom classes) an identifier name (ID) representing the fully qualified Java class file. Typically the shorter unqualified class name is used as the identifier name (ID).

fesi.extension.context.class-ID=fully-qualified-class-name

The FESI system extensions that are used by IBM Verify Identity Governance include a global context and three specific contexts.

Global context identifier:

Enrole

Specific context identifiers:

IdentityPolicy
HostSelection
Workflow

Although you must not modify the built-in system FESI extensions, you can add custom FESI extensions that might be required for any custom programs. When you add a custom FESI extension to this properties file, you must use one of the established global or specific contexts.

Indicate the fully qualified custom Java class file name as the value and provide a unique property key identifier name (ID) for the custom class. Examples:

fesi.extension.IdentityPolicy.custom-class-ID=custom-fully-qualified-class-name
fesi.extension.HostSelection.custom-class-ID=custom-fully-qualified-class-name

This section defines the deprecated properties used to configure FESI extensions (on a single line).

System FESI extensions
fesi.extension.Enrole=com.ibm.itim.fesiextensions.Enrole
fesi.extension.IdentityPolicy=com.ibm.itim.fesiextensions.IdentityPolicy
fesi.extension.HostSelection=com.ibm.itim.fesiextensions.ModelExtension
fesi.extension.OrphanAdoption.Model=com.ibm.itim.fesiextensions.ModelExtension
fesi.extension.PersonPlacementRules.Model=com.ibm.itim.
	fesiextensions.ModelExtension

fesi.extension.Workflow=com.ibm.itim.workflow.fesiextensions.WorkflowExtension
fesi.extension.Workflow.Model=com.ibm.itim.fesiextensions.ModelExtension
(next extension statement intended as one line)
fesi.extension.PostOffice=com.ibm.itim.mail.postoffice.fesiextensions.
	PostOfficeExtension

fesi.extension.Reminder=com.ibm.itim.fesiextensions.ReminderExtension

The value for each system property key is a fully qualified Java class file that IBM Verify Identity Governance provides.

Do not remove or modify information in this section

Custom FESI extensions
Example:
fesi.extension.enRole.custom-class-ID=custom-fully-qualified-class-name

You can modify the fesiextensions.properties files to include additional FESI extensions for required custom objects and methods.

The value for each custom property key is a fully qualified custom Java class file.

All property key names must be unique.

JavaScript password access
javascript.password.access.enabled

Determines whether plaintext passwords can be accessed from Person and Account objects. Values include:

  • true — Password access is enabled.
  • false — Passwords cannot be accessed with javascript.

Example (default):

javascript.password.access.enabled=true