The template for an HTTP system defines the specific parameters needed by URL-based iViews to connect to secure HTTP sites using SSO. Preauthentication can occur on either the client or server side:
Client: The HTTP Authentication Assistant (see table below) performs the authentication process transparently, the iView is loaded, and the user is connected without having to provide identification.
Server: The iView developer calls the HTTP Authentication Assistant on the server side. The back-end application returns the headers, the Authentication Assistant adds the headers to the request, and the user is connected to the application without having to provide identification.
See SAP Note 779865 for information and examples of editing HTTP systems when using:
Authentication Type: Server
Authentication Method: Other
Property |
Value/Comments |
---|---|
Category: User Management |
|
User Mapping Type |
For more information, see Editing System Properties . |
Category: HTTP Authentication |
|
Authentication Method |
Select one of the following: GET : Basic method for transferring parameters POST : Enables transfer of heavy data within navigation; not seen in URL Basic Authentication : Not possible from client side Other : Choose this option if the site requires more than User Name and Password for proper authentication. This choice entails follow-up coding to produce a viable service; see Example , below. |
Authentication Type |
Client : Browser performs authentication Server : Portal server performs authentication. This choice entails follow-up coding to produce a viable service; see Example , below. |
Authentication URL |
URL path must include any other parameters that the secured site requests, apart from User Name and Password. |
Custom Authentication Service ID |
Relevant only for Other authentication method Enter the Key of the service that implements the authentication; see Example , below. |
Enable Authentication Assistant |
Yes : Enables the service No : Authentication Assistant process will not function and authentication will not be performed. |
Permanent Authentication (client-side only) |
Used to determine if authentication will be performed once per session or with each iView refresh Relevant only when using client-side authentication |
URL Parameter for Password |
Must be defined according to the (coded) parameter label used by the target site Relevant only for GET and POST authentication methods |
URL Parameter for User Name |
Must be defined according to the (coded) parameter label used by the target site Relevant only for GET and POST authentication methods |
Host Name |
Specifies the name or the machine used to build a URL. The host name must be defined either using the fully qualified host name or the IP address. |
Port |
The port on the host machine by which a system is accessed (relevant for generic system destination). |
Protocol |
The URL protocol, HTTP or HTTPS, used to connect to a back-end system. When using generic system destination, entering a valid value for this property, is mandatory. |