eai-verify-user-identity
Use the eai-verify-user-identity stanza entry to control whether the user identity is verified during reauthentication. EAI applications can reauthenticate a user by returning new authentication information for a previously authenticated session. By default, WebSEAL does not ensure that the new user identity matches the user identity from the previous authentication.
Syntax
eai-verify-user-identity = {yes|no}Description
During the EAI re-authentication process, this configuration entry determines whether the new user identity must match the user identity from the previous authentication.
Options
- yes
- During EAI authentication, the new user identity is compared with the user identity from the previous authentication. If the user identities do not match, an error is returned.
- no
- EAI authentication proceeds without verifying the new user identity.
Usage
This stanza entry is optional.
Default value
no
Example
eai-verify-user-identity = yes