2 Replies Latest reply on Dec 29, 2008 8:34 AM by Newsgroup_User

    Flex - Single Sign-on

    ParameswaranM Level 1
      We are trying to integrate Flex with a Single-sign on product (Siteminder). In our environment, the incoming request to the Flex application will get routed via Siteminder. Siteminder will authenticate the incoming request, then append few authorization details (user profile, like role, department, etc) in the Http header and redirect the request to the Flex application.

      Our requirement is to read the http header information, and take some business validation based on user profile. But we couldn’t able to find any direct functions, which helps us to read the http header information. When we browsed through Flex documentation, we found couple of functions for it (like URLLoader). But these functions require sending explict request to the server and reading the response header. But in our case, we are not sending any explicit request to Siteminder. Rather we are just trying to read the http header, when the user request hits the swf file.

      We have managed found a solution using JSP wrapper and Flashvar. But we don't want to use a JSP wrapper in-between. Is there any other alternate way to read http header? Any suggestion would be greatly appreciated.
        • 1. Re: Flex - Single Sign-on
          Kuma9g Level 1
          quote:

          Originally posted by: ParameswaranM
          We are trying to integrate Flex with a Single-sign on product (Siteminder). In our environment, the incoming request to the Flex application will get routed via Siteminder. Siteminder will authenticate the incoming request, then append few authorization details (user profile, like role, department, etc) in the Http header and redirect the request to the Flex application.

          Our requirement is to read the http header information, and take some business validation based on user profile. But we couldn’t able to find any direct functions, which helps us to read the http header information. When we browsed through Flex documentation, we found couple of functions for it (like URLLoader). But these functions require sending explict request to the server and reading the response header. But in our case, we are not sending any explicit request to Siteminder. Rather we are just trying to read the http header, when the user request hits the swf file.

          We have managed found a solution using JSP wrapper and Flashvar. But we don't want to use a JSP wrapper in-between. Is there any other alternate way to read http header? Any suggestion would be greatly appreciated.



          • 2. Re: Flex - Single Sign-on
            Level 7

            "Kuma9g" <webforumsuser@macromedia.com> wrote in message
            news:gjat9q$51h$1@forums.macromedia.com...
            >
            quote:

            Originally posted by: ParameswaranM
            > We are trying to integrate Flex with a Single-sign on product
            > (Siteminder). In
            > our environment, the incoming request to the Flex application will get
            > routed
            > via Siteminder. Siteminder will authenticate the incoming request, then
            > append
            > few authorization details (user profile, like role, department, etc) in
            > the
            > Http header and redirect the request to the Flex application.
            >
            > Our requirement is to read the http header information, and take some
            > business
            > validation based on user profile. But we couldn?t able to find any direct
            > functions, which helps us to read the http header information. When we
            > browsed
            > through Flex documentation, we found couple of functions for it (like
            > URLLoader). But these functions require sending explict request to the
            > server
            > and reading the response header. But in our case, we are not sending any
            > explicit request to Siteminder. Rather we are just trying to read the http
            > header, when the user request hits the swf file.
            >
            > We have managed found a solution using JSP wrapper and Flashvar. But we
            > don't
            > want to use a JSP wrapper in-between. Is there any other alternate way to
            > read
            > http header? Any suggestion would be greatly appreciated.
            >


            I believe the header is inherently accessible only to the server side, not
            the client side.

            HTH;

            Amy