Tools / ForgeRock IAM interview questions
What are Authentication Nodes in ForgeRock AM and can you name commonly used ones?
Authentication Nodes are the individual building blocks of Authentication Trees (Journeys) in ForgeRock AM. Each node encapsulates a single, discrete authentication or decision task. It accepts shared state (a map of context attributes), performs its operation, and emits one of its defined outcome paths, which connects to the next node in the graph. Nodes are stateless in themselves — all shared context travels in the shared state map.
ForgeRock ships dozens of built-in nodes. Commonly used ones include:
| Node | Purpose |
|---|---|
| Username Collector | Prompts the user for their username and stores it in shared state |
| Password Collector | Prompts for password (masked input) |
| Data Store Decision | Validates credentials against the configured identity store (DS/LDAP) |
| OTP Email Sender / OTP SMS Sender | Generates and dispatches a one-time password via email or SMS |
| OATH Token Verifier | Validates TOTP/HOTP codes from authenticator apps |
| WebAuthn Authentication | Drives FIDO2 WebAuthn challenge/response for passwordless flows |
| Push Authentication | Sends a push notification to the ForgeRock Authenticator app |
| Script Node | Executes custom Groovy or JavaScript to implement arbitrary logic |
| Scripted Decision Node | Runs a script and routes to outcomes based on script output |
| Device Fingerprint | Collects and compares browser/device fingerprints for risk assessment |
| LDAP Decision Node | Validates credentials directly against an LDAP store |
| Identity Store Decision | Resolves a user profile in the identity store by username |
| Social Provider Handler | Handles OAuth2/OIDC flows to external social providers (Google, Apple, etc.) |
| Inner Tree Evaluator | Embeds and evaluates another complete authentication tree |
Custom nodes can be developed as OSGi bundles deployed to AM. This is a common requirement in enterprise projects where vendor-specific requirements (e.g., validating against an internal risk score API or decrypting a proprietary SSO cookie) need to be expressed as first-class tree nodes rather than scripts.
Invest now in Acorns!!! 🚀
Join Acorns and get your $5 bonus!
Acorns is a micro-investing app that automatically invests your "spare change" from daily purchases into diversified, expert-built portfolios of ETFs. It is designed for beginners, allowing you to start investing with as little as $5. The service automates saving and investing. Disclosure: I may receive a referral bonus.
Invest now!!! Get Free equity stock (US, UK only)!
Use Robinhood app to invest in stocks. It is safe and secure. Use the Referral link to claim your free stock when you sign up!.
The Robinhood app makes it easy to trade stocks, crypto and more.
Webull! Receive free stock by signing up using the link: Webull signup.
More Related questions...
