Defining Application Authentication

Assign a security profile to the selected application. The security profile defines parameters that control how the server authenticates the user during onboarding, and request-response interactions with the back end.

Prerequisites

Configure security profiles for application authentication.

Task

Security profiles are made up of one or more authentication providers. These authentication providers can be shared across multiple security profiles, and can be modified in Management Cockpit. For more information on authentication providers, see Authentication in SAP Mobile Platform.

You can stack multiple providers to take advantage of features in the order you chose; the Control Flag must be set for each enabled security provider in the stack.

  1. From Management Cockpit, select Applications > Authentication.
  2. Click Existing Profile.
    Note: You can also create a new profile.
  3. Select a security profile name from the Name list.
    The name appears under Security Profile Properties, and the providers that are associated with the security profile appear under Authentication Providers.
  4. Under Security Profile Properties, enter values.
    Field Value
    Name A unique name for the application authentication profile.
    Check Impersonation (Optional) In token-based authentication, whether to allow authentication to succeed when the user name presented cannot be matched against any of the user names validated in the login modules. By default the property is enabled, which prevents the user authentication from succeeding in this scenario.
  5. Under Authentication Providers, you can select a security profile URL to view its settings. To change its settings, you must modify it using Settings > Security Profiles.