LDAP Authentication with Automatic Interaction Case Resume from URL Query Parameter

I’m implementing LDAP authentication in Pega where:

Current Setup:

  • I have an LDAPAuthentication activity that validates credentials
  • I have a separate resumeIcase activity (in my custom ruleset) that opens the I case
  • I’m trying to call resumeIcase from within LDAPAuthentication to open the case after successful login

Problem:
The LDAPAuthentication activity runs under the unauthenticated access group (which has limited rulesets for security). Since my resumeIcase activity is in a custom ruleset, the unauthenticated group can’t access it, causing the case resume to fail.

Questions:

  1. How do I read the CaseId query parameter from the login URL inside the LDAPAuthentication activity?
  2. What’s the best practice for calling application-level activities (that require custom rulesets) during the login/authentication phase?
  3. Should I include my custom rulesets in the unauthenticated access group to allow this, or is there a better approach?