Security Provider Configuration Properties

Security providers implement different properties, depending on the type of provider you are configuring.

Platform administrators can configure application security properties in the SAP Control Center. These properties are then transcribed to an XML file in the SMP_HOME\Servers\UnwiredServer\Repository\CSI\ directory. A new section is created for each provider you add.

• LDAP Configuration Properties
  Use these properties to configure the LDAP provider used to authenticate SAP Control Center administration logins or to configure the LDAP provider used to authenticate device application logins. If you are configuring an LDAP provider for device application logins in SAP Control Center, then SAP Mobile Platform administrators use SAP Control Center these properties are saved to the SMP_HOME\Servers\UnwiredServer\Repository\CSI\<security configuration name file.
• NTProxy Configuration Properties
  (Not applicable to Online Data Proxy) Configure these properties to allow the operating system's security mechanisms to validate user credentials using NTProxy (Windows Native OS). Access these properties from the Authentication tab of the Security node in SAP Control Center.
• NoSecurity Configuration Properties
  A NoSecurity provider offers pass-through security for SAP Mobile Server, and should be typically be reserved for devlopment or testing. SAP strongly encourages you to avoid using this provider in production environments — either for administration or device user authentication.
• Certificate Authentication Properties
  Add and configure authentication provider properties for CertificateAuthenticationLoginModule, or accept the default settings.
• Certificate Validation Properties
  Add and configure provider properties for CertificateValidationLoginModule, or accept the default settings. CertificateValidationLoginModule  can be used in conjunction with other login modules that support certificate authentication (for example, LDAPLoginModule) by configuring CertificateValidationLoginModule before the login modules that support certificate authentication.
• HTTP Basic Authentication Properties
  The HttpAuthenticationLoginModule provider authenticates the user with given credentials (user name and password) against the secured Web server using a GET against a URL that requires basic authentication, and can be configured to retrieve a cookie with the configured name and add it to the JAAS subject to facilitate single sign-on (SSO).
• SAP SSO Token Authentication Properties
  The SAPSSOTokenLoginModule has been deprecated. Use the HttpAuthenticationLoginModule when SAP SSO2 token authentication is required.
• Preconfigured User Authentication Properties
  The PreConfiguredUserLoginModule authenticates the SAP Mobile Platform Administrator user whose credentials are specified during installations.
• Audit Provider Properties
  The security configuration for SAP Mobile Platform includes an audit provider with three components: audit filter, audit formatter, and audit destination.