updateAuthStatus Oracle Adaptive Access Manager APIs

Integrating Native Java Applications 4-13

4.5.10 processPatternAnalysis

processPatternAnalysis triggers the data pattern processing. public VCryptResponse processPatternAnalysisString requestId, long transactionId, int status, String transactionType;

4.5.11 markDeviceSafe

markDeviceSafe marks the user device as safe. public boolean markDeviceSafeString requestId, boolean isSafe;

4.5.12 IsDeviceMarkedSafe

IsDeviceMarkedSafe returns a value indicating whether the user device associated with a request is safe. public VCryptBooleanResponse IsDeviceMarkedSafeString requestId; Table 4–9 updateAuthStatus Parameters Parameter Description requestId The login session ID; this is the ID that should be used in all API calls for the login session requestTime The time at which the request was made resultStatus A value of the user-defined enumeration auth.status.enum clientType An enumeration value indicating the client type used for authentication clientVersion The version of the client; optional analyzePatterns Boolean to indicate if pattern processing should be performed. When the value is passed in as true, the pattern processing is performed for the transaction if the resultStatus value is success. Table 4–10 processPatternAnalysis Parameters Parameter Description requestId The login session ID; this is the ID that should be used in all API calls for the login session transactionId The identifier of the transaction. For authentication type of data this is ignored. It can be passed in as null. For pattern processing of transaction data this parameter is required. status A value of the user-defined enumeration auth.status.enum. If the value of the status is the value corresponding to a Success value in the enum, pattern analysis will be performed; otherwise, it will not be performed. transactionType Indicates the type of the transaction; must be auth for authentication transactions; other transaction type values, such as bill_payment, can be customized. Table 4–11 markDeviceSafe Parameters Parameter Description requestId The login session ID; this is the ID that should be used in all API calls for the login session isSafe Indicates whether this user device is safe 4-14 Oracle Fusion Middleware Developers Guide for Oracle Adaptive Access Manager

4.5.13 clearSafeDeviceList

clearSafeDeviceList clears the user safe device list of the user associated with a request. public VCryptBooleanResponse clearSafeDeviceListString requestId;

4.6 Rules Engine

The Rules Engine is the part of the OAAM that enforces policies at checkpoint. OAAM includes APIs to evaluate policies that return results depending on the calling context. The following section provides details of the method processRules and on how to get the device ID.

4.6.1 processRules

processRules processes policy sets for the passed checkpoints. public VCryptRulesResult processRulesString requestId, List runtimeTypes, Map contextMap; public VCryptRulesResult processRulesString requestId, Date requestTime, List runtimeTypes, Map contextMap; processRules calls the methods related to the Rules Engine, gets an instance of the Rules Engine by calling the method VCryptTrackerUtil.getVCryptRulesEngineInstance . Table 4–12 IsDeviceMarkedSafe Parameters Parameter Description requestId The login session ID; this is the ID that should be used in all API calls for the login session Table 4–13 clearSafeDeviceList Parameters Parameter Description requestId The ID for the login session. The same ID should be used for all the calls to Bharosa API for the login session. Table 4–14 processRules Parameters Parameter Description requestId The login session ID; this is the ID that should be used in all API calls for the login session runtimeTypes The list of checkpoints to be evaluated; each checkpoint in this list is evaluated. The runtimeTypes is a singleton list of Integer type. Refer to the Information about execution of multiple checkpoints in the processRules method section below. For example, to run a pre-authentication checkpoint, create the following list: List PRE_AUTH_RUNTIME_LIST = Collections.singletonListnew Integer1; requestTime The time at which the request was made contextMap A list of key-value pairs identifying the context data; rules in policies can make decisions based on this data