Re: [Architecture] [IS] Adding Tenant Base Account Recovery ReCaptcha

2018-10-22 Thread Sarubi Thillainathan 
Hi all,

PR for this feature is get merged and will be available with next IS
release 5.8 onward.
PRs can be found in [1], [2], [3].

[1] https://github.com/wso2/carbon-identity-framework/pull/1926
[2] https://github.com/wso2/carbon-identity-framework/pull/1926
[3] https://github.com/wso2-extensions/identity-governance/pull/255

Thanks,
Sarubi.

On Mon, Oct 8, 2018 at 10:25 AM Sarubi Thillainathan 
wrote:

> Hi all,
>
> After the offline discussion with Isura and Hasintha for this $Subject
> issue,
> The proposed solution has an intermediate page that is able to grab the
> tenant domain name. This intermediate page can be enabled via the
> context-parameter “EnableMultiTenancy” to true in
> “accountrecoveryendpoint.war” web.xml.
>
> Modified flow of implementation is as follows:
>
> [image: xx.png]
>
>
> Thanks,
> Sarubi.
>
> On Mon, Oct 1, 2018 at 7:57 AM Hasintha Indrajee 
> wrote:
>
>>
>>
>> On Mon, Oct 1, 2018 at 5:20 AM Isura Karunaratne  wrote:
>>
>>>
>>>
>>> On Sun, Sep 30, 2018 at 6:07 PM Sarubi Thillainathan 
>>> wrote:
>>>



 On Sun, Sep 30, 2018 at 6:03 PM Sarubi Thillainathan 
 wrote:

> Hi all,
>
> I'm working on adding ReCaptcha for account recovery that is, username
> recovery and password recovery. I was able to integrate this feature with
> WSO2 Identity Server. But there is a limitation found that from the login
> dashboard we can not able to obtain the user's tenant domain prior to
> loading the username/ password recovery page with reCaptcha. Since this
> account recovery configurations under resident Idp are the tenant
> dependant. Currently, I'm reading from carbon super configurations.
>
> For this issue, the proposed solution is to have an intermediate page
> that is able to grab the tenant domain name. This intermediate page can be
> enable via the configuration file (identity XML).
>
 I assume that the intermediate page must be enabled in a multi tenancy
>>> deployment. We can make this configuraiton to false by default and clearly
>>> document to enable it in multi tenancy deployments.
>>>
>>
>>
>>> +1
>>>
>>
>>
>>> Thanks
>>> Isura.
>>>

>
> Planned flow of implementation is as follows:
>
> [image: Untitled Diagram (1).png]
>
> Please provide your thoughts and feedback on this.
>
> Thanks,
> Sarubi.
> --
> *Sarubi Thillainathan *
> *Software Engineer - WSO2 Inc.*
>
> *Mobile : +94 (0) 76 68 49 101*
>


 --
 *Sarubi Thillainathan *
 *Software Engineer - WSO2 Inc.*

 *Mobile : +94 (0) 76 68 49 101*

>>>
>>>
>>> --
>>>
>>> *Isura Dilhara Karunaratne*
>>> Associate Technical Lead | WSO2 
>>> *lean.enterprise.middleware*
>>> Email: is...@wso2.com
>>> Mob : +94 772 254 810
>>> Blog : http://isurad.blogspot.com/
>>>
>>>
>>>
>>>
>>
>> --
>> Hasintha Indrajee
>> WSO2, Inc.
>> Mobile:+94 771892453
>>
>>
>
> --
> *Sarubi Thillainathan *
> *Software Engineer - WSO2 Inc.*
>
> *Mobile : +94 (0) 76 68 49 101*
>


-- 
*Sarubi Thillainathan *
*Software Engineer - WSO2 Inc.*

*Mobile : +94 (0) 76 68 49 101*
___
Architecture mailing list
Architecture@wso2.org
https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture

Re: [Architecture] [IS] Adding Tenant Base Account Recovery ReCaptcha

2018-10-07 Thread Sarubi Thillainathan 
Hi all,

After the offline discussion with Isura and Hasintha for this $Subject
issue,
The proposed solution has an intermediate page that is able to grab the
tenant domain name. This intermediate page can be enabled via the
context-parameter “EnableMultiTenancy” to true in
“accountrecoveryendpoint.war” web.xml.

Modified flow of implementation is as follows:

[image: xx.png]


Thanks,
Sarubi.

On Mon, Oct 1, 2018 at 7:57 AM Hasintha Indrajee  wrote:

>
>
> On Mon, Oct 1, 2018 at 5:20 AM Isura Karunaratne  wrote:
>
>>
>>
>> On Sun, Sep 30, 2018 at 6:07 PM Sarubi Thillainathan 
>> wrote:
>>
>>>
>>>
>>>
>>> On Sun, Sep 30, 2018 at 6:03 PM Sarubi Thillainathan 
>>> wrote:
>>>
 Hi all,

 I'm working on adding ReCaptcha for account recovery that is, username
 recovery and password recovery. I was able to integrate this feature with
 WSO2 Identity Server. But there is a limitation found that from the login
 dashboard we can not able to obtain the user's tenant domain prior to
 loading the username/ password recovery page with reCaptcha. Since this
 account recovery configurations under resident Idp are the tenant
 dependant. Currently, I'm reading from carbon super configurations.

 For this issue, the proposed solution is to have an intermediate page
 that is able to grab the tenant domain name. This intermediate page can be
 enable via the configuration file (identity XML).

>>> I assume that the intermediate page must be enabled in a multi tenancy
>> deployment. We can make this configuraiton to false by default and clearly
>> document to enable it in multi tenancy deployments.
>>
>
>
>> +1
>>
>
>
>> Thanks
>> Isura.
>>
>>>

 Planned flow of implementation is as follows:

 [image: Untitled Diagram (1).png]

 Please provide your thoughts and feedback on this.

 Thanks,
 Sarubi.
 --
 *Sarubi Thillainathan *
 *Software Engineer - WSO2 Inc.*

 *Mobile : +94 (0) 76 68 49 101*

>>>
>>>
>>> --
>>> *Sarubi Thillainathan *
>>> *Software Engineer - WSO2 Inc.*
>>>
>>> *Mobile : +94 (0) 76 68 49 101*
>>>
>>
>>
>> --
>>
>> *Isura Dilhara Karunaratne*
>> Associate Technical Lead | WSO2 
>> *lean.enterprise.middleware*
>> Email: is...@wso2.com
>> Mob : +94 772 254 810
>> Blog : http://isurad.blogspot.com/
>>
>>
>>
>>
>
> --
> Hasintha Indrajee
> WSO2, Inc.
> Mobile:+94 771892453
>
>

-- 
*Sarubi Thillainathan *
*Software Engineer - WSO2 Inc.*

*Mobile : +94 (0) 76 68 49 101*
___
Architecture mailing list
Architecture@wso2.org
https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture

Re: [Architecture] [IS] Adding Tenant Base Account Recovery ReCaptcha

2018-09-30 Thread Sarubi Thillainathan 
On Sun, Sep 30, 2018 at 6:03 PM Sarubi Thillainathan 
wrote:

> Hi all,
>
> I'm working on adding ReCaptcha for account recovery that is, username
> recovery and password recovery. I was able to integrate this feature with
> WSO2 Identity Server. But there is a limitation found that from the login
> dashboard we can not able to obtain the user's tenant domain prior to
> loading the username/ password recovery page with reCaptcha. Since this
> account recovery configurations under resident Idp are the tenant
> dependant. Currently, I'm reading from carbon super configurations.
>
> For this issue, the proposed solution is to have an intermediate page that
> is able to grab the tenant domain name. This intermediate page can be
> enable via the configuration file (identity XML).
>
> Planned flow of implementation is as follows:
>
> [image: Untitled Diagram (1).png]
>
> Please provide your thoughts and feedback on this.
>
> Thanks,
> Sarubi.
> --
> *Sarubi Thillainathan *
> *Software Engineer - WSO2 Inc.*
>
> *Mobile : +94 (0) 76 68 49 101*
>


-- 
*Sarubi Thillainathan *
*Software Engineer - WSO2 Inc.*

*Mobile : +94 (0) 76 68 49 101*
___
Architecture mailing list
Architecture@wso2.org
https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture