Michael,

You can grab the header in your Code-Security  login activity as defined in your Data-Admin-AuthService.

Use a property set step where the properties value is:

@java("((javax.servlet.http.HttpServletRequest)tools.getRequestor().getRequestorPage().getObject(\"pxHTTPServletRequest\")).getHeader(\"x-forwarded\")")

If you want to output to the logfile all the HTTP headers you are getting in the incoming request for debug purposes use the following in a Java step:

javax.servlet.http.HttpServletRequest request =
    (javax.servlet.http.HttpServletRequest)tools.getRequestor().getRequestorPage().getObject("pxHTTPServletRequest");

//debug
java.util.Enumeration e = request.getHeaderNames();
String header = null;
while (e.hasMoreElements()) {
      header = (String) e.nextElement();
      oLog.infoForced(header + ": " + request.getHeader(header));     
}

Remember to comment this JAVA step or comment the debug code after you are done with it.

--Chris