Authentication with custom http header

[neteducation]

Hi all,

We want to run an IWB behind a Single Sign-On Solution. Setup would be as follows:

User Browser -> Proxy Server making the SSO and adding the identified user as HTTP Header -> IWB

So basically IWB should, instead of asking for username/password read the username from a HTTP Header.

Is that possible, and if so, how ?

Thanks
Frank

[wolfgan...@fluidops.com]

Hi Frank,

you can always use basic-authentication to talk to IWB. The LoginFilter does not send a 401 Authorization required message, though, so you have to send the Authorization header preemptively.

Regards,

Wolfgang