OAM Access Gate (SDK10G)
Hi All,
I would like to understand the below behaviour with Obssocookie
Version's
OAM 10.1.4.3
AccessGate SDK10G
consider a SOA webservice is using access gate SDK10G to autheticate the user by passing username/password with a URL defined in OAM. After successful authentication, obssocookie is returned to the application as an header.
SOA makes the the subsequent call to a different URL by passing the cookie that was recieved above.
Here, even if we do not define the URL in OAM and with (deny on not protected checked on access gate profile), I have noticed that, OAM do not deny the user. Rather access is provided to the user.