Run Post-Authentication Rules R3

Natively Integrating with Oracle Adaptive Access Manager 2-13

2.2.1.8 Check Registration for User C2

Rules are run to check registration; if the user is not registered, he is directed to do so.

2.2.1.9 Run Registration Required Rules R4

The registration is required depending on business and security requirements, which specify whether the registration is mandatory or optional. Values returned by registration rules include the following: ■ Register to require user registration. ■ Registration Optional to make user registration optional. ■ Skip Registration to skip registration for this session. Table 2–11 lists the APIs used to run registration rules. Table 2–10 Post-Authentication Rules Reference APIs Module APIs Description Server VCryptRulesEngine::processRules For method details, see Section 4.6.1, processRules. Oracle Adaptive Access Manager Sample handlePassword.jsp Calls BharosaHelper::runPostAuthRules which returns: ALLOW BLOCK CHALLENGE If ALLOW: BharosaHelper::runRegistrationRules returns ALLOW REGISTER_QUESTIONS REGISTER_USER_INFO REGISTER_USER SYSTEM_ERROR If CHALLENGE: forward_challengePage BharosaHelper BharosaHelper::runPostAuthRules 2-14 Oracle Fusion Middleware Developers Guide for Oracle Adaptive Access Manager

2.2.1.10 Enter Registration Flow P6

The Registration Flow allows you to register a new image and caption, questions, and so on as described in the table below:

2.2.1.11 Run Challenge Rules R5

The challenge rules are invoked to determine which type of challenge to display to the user. Values returned by the challenge rules include the following: Table 2–11 Registration Required Rules Reference APIs Module APIs Description Server VCryptRulesEngine::processRules For method details, see Section 4.6.1, processRules. Oracle Adaptive Access Manager Sample password.jsp Invokes rules to identify the virtual authentication device type to use; the default is KeyPad Creates the virtual authentication device, names it, and sets all initial background frames Invokes kbimage.jsp as configured Forwards to page handlePassword.jsp BharosaHelper BharosaHelper::getAuthentiPad Table 2–12 Registration Flow Module APIs Description Server VCryptRulesEngine::processRules For method details, see Section 4.6.1, processRules. Oracle Adaptive Access Manager Sample registerImagePhrase.jsp Assigns new image and caption to user Assigns new image and caption to user Forwards to page handleRegisterImagePhrase.jsp registerQuestions.jsp Gets question pick set for the user Displays question selection user interface and inputs for answers Forwards to page handleRegisterQuestions.jsp registerContactInfo.jsp Presents user with inputs for OTP registration information Forwards to page handleRegisterContactInfo.jsp BharosaHelper BharosaHelper::getAuthentiPad BharosaHelper::createSampleAuthentiPad BharosaHelper::assignRandomImageAndCaption BharosaHelper::saveNewImageAndOrCaption BharosaHelper::getQuestions BharosaHelper::isDeviceRegistered BharosaHelper::setContactInfo