Configuring LWS Auth Exits
This is preview documentation and is subject to change.
LightWave Server Authentication Exits are configured with an Access Control Policy AuthExit rule, similar to the configuration of Identity, Source IP Address, and CORS Origins rules. The difference between AuthExit rules and the other types of rules is that there can be only one AuthExit rule per Access Control Policy.
The AuthExit rule is activated by its ACP being assigned to a LWS Service, just like any other rule type.
Property | Description | Default |
---|---|---|
Pathmon | The process name of the serverclass PATHMON process controlling the token server. May be specified as a DEFINE. | none required |
Serverclass | The serverclass name of the token server. | none required |
Token Set Name | The name of the token set for this AuthExit rule. If no token set name is provided, it is up to the token server as to which token set will be used. | none |
String Padding | Determines whether string fields sent to the token server are padded with spaces (spaces) or binary zeros (zeros). | zeros |
Retry Interval | The number of seconds to wait after an error has occurred before attempting another request to the token server. | 3 |
Retry Maximum | The number of retries to attempt before returning an error to the REST client. | 3 |