Security

curam.security.disable.authorisation

STRING

Default: false. Suppress the authorization checks normally performed by Curam.

curam.security.casesensitive

BOOLEAN

Authentication and authorization of usernames is case sensitive by default. When this property is set to false the authentication and authorization mechanisms will ignore the case of the user. If duplicate case insensitive user names exist (e.g. caseworker, CaseWorker), authentication will fail due to an ambiguous user name. Such duplicate names will also cause the security cache to fail to initialize.

curam.custom.externalaccess.implementation

STRING

The fully qualified name of the class implementing the curam.util.security.ExternalAccessSecurity interface. This class implements the custom authentication mechanism for External Users.

curam.custom.authentication.implementation

STRING

The fully qualified name of the class implementing the curam.util.security.CustomAuthenticator interface. This class implements custom authentication verifications that will be invoked during the authentication process.

curam.custom.userscope.implementation

STRING

The fully qualified name of the class implementing the curam.util.security.UserScope interface. This class determines the type of User logging into the application, i.e. INTERNAL or EXTERNAL.