amAuthAdaptive.properties revision 0cd4ae48cb64260dd3bfd39b29440586e3438e53
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunnington# DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunnington# Copyright (c) 2011 ForgeRock AS. All Rights Reserved
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunnington# The contents of this file are subject to the terms
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunnington# of the Common Development and Distribution License
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunnington# (the License). You may not use this file except in
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunnington# compliance with the License.
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunnington# You can obtain a copy of the License at
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunnington# http://forgerock.org/license/CDDLv1.0.html
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunnington# See the License for the specific language governing
a093731116a8c24d49b903df7602cf586e499b45Phill Cunnington# permission and limitations under the License.
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunnington# When distributing Covered Code, include this CDDL
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunnington# Header Notice in each file and include the License file
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunnington# at http://forgerock.org/license/CDDLv1.0.html
af38905e8a5231702db169603d942d5d2e0c4332David Luna# If applicable, add the following below the CDDL Header,
af38905e8a5231702db169603d942d5d2e0c4332David Luna# with the fields enclosed by brackets [] replaced by
af38905e8a5231702db169603d942d5d2e0c4332David Luna# your own identifying information:
af38905e8a5231702db169603d942d5d2e0c4332David Luna# "Portions Copyrighted [year] [name of copyright owner]"
af38905e8a5231702db169603d942d5d2e0c4332David Luna# Portions Copyrighted 2012 ForgeRock Inc
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunnington# Portions Copyrighted 2012 Open Source Solution Technology Corporation
3e00d049c722abe4b6819929a7bfef6c3f62d4f2James Phillpottsauthentication=Authentication Modules
c0202e5a338212ae386c672821f6dc4931c50f45James Phillpottsiplanet-am-auth-adaptive-service-description=Adaptive Risk
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill CunningtonnoInternalSession=Invalid session
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill CunningtonnoIdentity=Unable to find identity in Datastore
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona500=Authentication Level
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona500.help=The authentication level associated with this module.
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona500.help.txt=Each authentication module has an authentication level that can be used to indicate the level of security \
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtonassociated with the module; 0 is the lowest (and the default).
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona502=Risk Threshold
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona502.help=If the risk threshold value is not reached after executing the different tests, the authentication is considered to be successful.
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona502.help.txt=Associated with many of the adaptive risk checks is a score; if a check does not passes then the score is added to the current \
a093731116a8c24d49b903df7602cf586e499b45Phill Cunningtonrunning total. The final score is then compared with the <i>Risk Threshold</i>, if the score is lesser than said \
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtonthreshold the module will be successful.
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona503=Failed Authentication Check
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona503.help=Checks if the user has past authentication failures.
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona503.help.txt=Check if the OpenAM account lockout mechanism has recorded past authentication failures for the user.<br/><br/>\
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunnington<i>NB </i>For this check to function, Account Lockout must be enabled.
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona504=Enable Failed Authentication Reset
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona504.help=Enable the failed authentication reset check.
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona505.help=The amount to increment the score if this check fails.
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona506=Invert Result
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona506.help=If the check succeeds the score will be included in the total, for failure the score will not be incremented.
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona507=IP Range Check
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona507.help=Enables the checking of the client IP address against a list of IP addresses.
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona507.help.txt=The IP range check compares the IP of the client against a list of IP addresses, if the client IP is found within \
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtonsaid list the check is successful.
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona508.help=The list of IP address to compare against the client IP address.
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona508.help.txt=The format of the IP address is as follows:<br/><br/>\
a093731116a8c24d49b903df7602cf586e499b45Phill Cunnington<ul><li>Single IP address: <code>172.16.90.1</code></li><li>CIDR notation: <code>172.16.90.0/24</code></li>\
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunnington<li>IP net-block with netmask: <code>172.16.90.0:255.255.255.0</code></li></ul>
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona509.help=The amount to increment the score if this check fails.
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona510=Invert Result
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona510.help=If the check succeeds the score will be included in the total, for failure the score will not be incremented.
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona511=IP History Check
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona511.help=Enables the checking of client IP address against a list of past IP addresses.
a093731116a8c24d49b903df7602cf586e499b45Phill Cunningtona511.help.txt=If this check is enabled; a set number of past IP addresses used by the client to access OpenAM is recorded in the user \
a093731116a8c24d49b903df7602cf586e499b45Phill Cunningtonprofile. This check passes if the current client IP address is present in the history list. If the IP address is not present, the check \
3e00d049c722abe4b6819929a7bfef6c3f62d4f2James Phillpottsfails and the IP address is added to list if the overall authentication is successful (causing the oldest IP address to be removed).
c0202e5a338212ae386c672821f6dc4931c50f45James Phillpottsa512=History size
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona512.help=The number of client IP addresses to save in the history list.
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona513=Profile Attribute Name
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona513.help=The name of the attribute used to store the IP history list in the data store.
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona513.help.txt=IP history list is stored in the Data Store meaning your Data Store should be able to store values under the configured \
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtonattribute name. If you're using a directory server as backend, make sure your Data Store configuration contains the necessary \
a2b7fc0af7ba41ccf2fd4729a07ea33fbe30fb32quentin Castelobjectclass and attribute related settings.
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona514=Save Successful IP Address
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona514.help=The IP History list will be updated in the data store
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona514.help.txt=The Adaptive Risk Post Authentication Plug-in will update the IP history list if the overall authentication is successful.
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona515.help=The amount to increment the score if this check fails.
af38905e8a5231702db169603d942d5d2e0c4332David Lunaa516=Invert Result
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona516.help=If the check succeeds the score will be included in the total, for failure the score will not be incremented.
af38905e8a5231702db169603d942d5d2e0c4332David Lunaa517=Cookie Value Check
af38905e8a5231702db169603d942d5d2e0c4332David Lunaa517.help=Enables the checking of a known cookie value in the client request
af38905e8a5231702db169603d942d5d2e0c4332David Lunaa517.help.txt=If this check is enabled, the check looks for a known cookie in the client request. If the cookie exists and has the \
af38905e8a5231702db169603d942d5d2e0c4332David Lunacorrect value then the check will pass.
af38905e8a5231702db169603d942d5d2e0c4332David Lunaa518=Cookie Name
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona518.help=The name of the cookie to set on the client.
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona519=Cookie Value
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona519.help=The value to be set on the cookie.
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona520=Save Cookie Value on Successful Login
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona520.help=The cookie will be created on the client after successful login
af38905e8a5231702db169603d942d5d2e0c4332David Lunaa514.help.txt=The Adaptive Risk Post Authentication Plug-in will set the cookie on the client response
af38905e8a5231702db169603d942d5d2e0c4332David Lunaa521.help=The amount to increment the score if this check fails.
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona522=Invert Result
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona522.help=If the check succeeds the score will be included in the total, for failure the score will not be incremented.
af38905e8a5231702db169603d942d5d2e0c4332David Lunaa523=Time since Last login Check
af38905e8a5231702db169603d942d5d2e0c4332David Lunaa523.help=Enables the checking of the last time the user successfully authenticated.
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona523.help.txt=If this check is enabled, the check ensures the user has successfully authenticated within a given interval. If the \
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtoninterval has been exceeded the check will fail. The last authentication for the user is stored in a client cookie.
af38905e8a5231702db169603d942d5d2e0c4332David Lunaa524=Cookie Name
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona524.help=The name of the cookie used to store the time of the last successful authentication.
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona525=Max Time since Last login
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona525.help=The maximum number of days that can elapse before this test.
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona526=Save time of Successful Login
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona526.help=The last login time will be saved in a client cookie
af38905e8a5231702db169603d942d5d2e0c4332David Lunaa514.help.txt=The Adaptive Risk Post Authentication Plug-in will update the last login time
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona527.help=The amount to increment the score if this check fails.
af38905e8a5231702db169603d942d5d2e0c4332David Lunaa528=Invert Result
af38905e8a5231702db169603d942d5d2e0c4332David Lunaa528.help=If the check succeeds the score will be included in the total, for failure the score will not be incremented.
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona529=Profile Risk Attribute check
756d4b8bce5a58e5bd8fe686688b6c42d2e7052bPhill Cunningtona529.help=Enables the checking of the user profile for a matching attribute and value.
a529.help.txt=If this check is enabled, the check will pass if the users profile contains the required risk attribute and value.
a531.help=The name of the attribute to retrieve from the user profile in the data store.
a531.help=The required value of the named attribute.
a532.help=The amount to increment the score if this check fails.
a533.help=If the check succeeds the score will be included in the total, for failure the score will not be incremented.
a534.help=Enables the checking of the client request for a known cookie.
a534.help.txt=If this check is enabled, the check will pass if the client request contains the named cookie.
a535.help=The name of the cookie to be checked for (and optionally set) on the client request
a536.help=Set the device cookie on the client response
a514.help.txt=The Adaptive Risk Post Authentication Plug-in will set the device cookie on the client response
a537.help=The amount to increment the score if this check fails.
a538.help=If the check succeeds the score will be included in the total, for failure the score will not be incremented.
a539.help=Enables the checking of the client IP address against the geolocation database.
a539.help.txt=The geolocation database associates IP addresses against their known location. This check passes if the country associated \
The geolocation database is available in binary format at <a href="http://www.maxmind.com/app/country" target="_blank">MaxMind</a>.
a541.help=The path to the location of the GEO location database.
a541.help.txt=The Geolocation database is not distributed with OpenAM, you can get it in binary format from \
<a href="http://www.maxmind.com/app/country" target="_blank">MaxMind</a>.
a541.help=The list of country codes that are considered as valid locations for client IPs.
a541.help.txt=The list is made up of country codes separated by a | character; for example:<br/><br/>\
a542.help=The amount to increment the score if this check fails.
a543.help=If the check succeeds the score will be included in the total, for failure the score will not be incremented.
a544.help=Enables the checking of the client request for a known header name and value.
a544.help.txt=The request header check will pass if the client request contains the required named header and value.
a545.help=The name of the required HTTP header
a546.help=The required value of the named HTTP header.
a547.help=The amount to increment the score if this check fails.
a548.help=If the check succeeds the score will be included in the total, for failure the score will not be incremented.