Project: talendesb
Issue TESB-10373: tESBConsumer: user Credentials propagation
We need to provide possibility to make call on behalf of already authenticated user (existing SAML Token). SAML Token should be already in the flow. The case is: tESBConsumer component in the provider job (provider with Authentication SAML). For accessing a service on behalf of the initiating user, a technical user is required to request the 'on behalf' token at STS. This technical user is identified with its certificate. The certificate is a keypair with public and private key in keystore. The keystore is configured for the whole container. So the process designer needs to provide the alias name from key and the password from key within the wizard. On the tEBConsumer component we need some changes. If 'Use Authentication'/'SAML Token' selected we have 2 options: - username/password (as for now) - 'propogate credentials' (new one) May be add checkbox 'propogate credentials' to settings. If not selected - show username/password fields. In case propogation enabled: - 2 field: 'alias name' and 'password' - we pass 'samlToken', 'alias name' and 'password' values to Runtime to make call on behalf. If SR is enabled: 'propogate credentials' should be also available.
Story points: 2