HTTP Basic Authentication Properties

The HttpAuthenticationLoginModule provider authenticates the user with given credentials (user name and password) against a HTTP(S) enterprise information system (EIS) using a GET against an URL that requires BASIC authentication, and can be configured to retrieve a cookie with the configured name and add it to the JAAS subject to facilitate single sign-on.

Note: If you are using this provider for the "admin" security configuration, ensure you make corresponding provider changes for Sybase Control Center logins. See Enabling Authentication and RBAC for Administrators in the Security guide.
HttpAuthenticationLoginModule properties
Property Description
URL The HTTP(S) URL that authenticates the user. For SSO, this is the server URL from which Unwired Server acquires the SSO cookie/token.
Disable certificate validation (Optional) – the default is False. If set to True, disables certificate validation when establishing an HTTPS connection to the EIS using the configured URL. Set to True only for configuration debugging.
SSO cookie name (Optional) – name of the cookie that is set in the session and holds the SSO token for single sign-on.

The authentication provider ignores the status code when a SSO cookie is found in the session. If the cookie is found, authentication succeeds regardless of the return status code.

Roles HTTP header (Optional) – comma separated list of roles granted to the authenticated user for role-based authorization.
Successful connection status code HTTP status code interpreted as success when connection is established to the EIS. The default is 200.
HTTP connection timeout interval The value, in seconds, after which an HTTP(s) connection request to the EIS times out. If the HTTP connection made in this module (for either user authentication or configuration validation) does not have a time out set, and attempts to connect to an EIS that is unresponsive, the connection hangs, which could potentially cause Unwired Server to hang. Setting the timeout interval ensures authentication failure is reported without waiting for ever for the server to respond.