29.4.2 Determining when to Show the Specific JSP Files

You must define logic in your custom web pages for whether to show impersonator.jsp or impersonatee.jsp for a specific authenticated session. Use the following information to build the menu options in the web pages for impersonation.

The default user portal uses an Identity Server endpoint that determines which impersonation-related menu items to display for a particular end-user session. This endpoint is located at https://NIDP-hostname:port/nidp/portal/uiIcons.xml

When you send an HTTP GET request to that endpoint from an authenticated session, it returns XML similar to the following:

<UIIcons>
<UIIcon altText="Help Desk Session..." linkTarget="_top" tags="LANDING_PAGE|width=425|type=dialog|height=300" title="Help Desk Session..." url="nidp/jsp/impersonatee.jsp"/>
<UIIcon altText="Start Help Desk Session..." linkTarget="_top" tags="LANDING_PAGE|width=425|type=dialog|height=300" title="Start Help Desk Session..." url="nidp/jsp/impersonator.jsp"/>
</UIIcons>

Within the UIIcons element, there are zero, one, or two child elements named UIIcon. The title attribute on those elements is one of the following three strings (if the user's locale indicates English):

End Help Desk Session

  • When this element is available, the default User Portal displays a menu item with the same name. When a user selects this menu item, it ends impersonation by calling https://NIDP-hostname:port/nidp/app/ilogout.

    NOTE:impersonator.jsp also includes a way to end a current impersonation session. You do not need to check or act on this particular element if you have implemented this in the impersonator.jsp file.

  • This element is available only if the Impersonation feature is enabled in Administration Console, and the currently authenticated session is an active impersonation session.

  • When this element is available, the other two elements: Start Help Desk Session and Help Desk Session are not available.

Start Help Desk Session

  • When this element is available, the default User Portal displays a menu item with the same name. When a user selects this menu item, the User Portal loads impersonator.jsp in an iFrame.

  • This element is available only if the Impersonation feature is enabled in Administration Console, the currently authenticated session is not an active impersonation session, and the currently authenticated user has a help desk role (as configured in the Impersonation feature configured in Administration Console).

  • When this element is available, the Help Desk Session element is also available.

Help Desk Session

  • When this element is available, the default User Portal displays a menu item with the same name. When a user selects this menu item, the User Portal loads the impersonatee.jsp file in an iFrame.

  • This element is available only if the Impersonation feature is enabled in Administration Console, and the currently authenticated session is not an active impersonation session.

  • When this element is available, the Start Help Desk Session element might also be available, if the currently authenticated user has a help desk role (as configured in the Impersonation feature configuration in Administration Console).