Single Sign On - RFID: UID in X.509 Certificate

[former_member612796]

Hi,

Regarding the signle sign on by means of RFID. Is it possible to add the UID of the RFID token to the X.509 certificate?

Best regards

[Colt]

Hi Herbert,

Yes it is. You will need to configure an LDAP destination within SLS and then you are able to use LDAP attributes (your AD must contain the UID within a specified attribute) to construct the X.509 DN of the user. This can be done in the corresponding Client Authentication Profile.

You could put it either in the DN e.g. CN=<User>, O=<Company>, OU=<UID>, C=<Country> or into the Subject Alternative Name.

Cheers Carsten