Resolve Account Link¶

Resolving links means to lookup a link using the foreign username and the account domain it was linked with, and replacing the logged in username with the linked username.

Overview¶

In order to resolve a link, the action needs an account manager configured. This should be the same account manager that was used to create the link. It will attempt to find the local account using the linked foreign account username.

If no link is found, the default setting is to ignore the action and proceed. However it is possible to configure it to fail if it cannot resolve the link.

Configuration¶

The following configuration options are available:

Configuration	Mandatory	Description
`linking-account-manager`	yes	Where the links are stored
`linking-account-domain`	yes	The account domain to look for when resolving a link
`original-subject-attribute-name`	no	If set, the original username will be stored in this attribute.
`original-subject-attribute-target`	no	The target location for the original username attribute (`subject-attributes`, `context-attributes`, or `action-attributes`). Default value is `subject-attributes`.
`linked-domain-attribute-name`	no	If set, the original account domain will be stored in this attribute.
`linked-domain-attribute-target`	no	The target location for the account domain attribute (`subject-attributes`, `context-attributes`, or `action-attributes`). Default value is `subject-attributes`.
`fail-on-no-link`	no	(Default false) If `true` the authentication will fail if no link is present.

Fig. 113 Resolve Link Action configuration