AEMAaCS | Bypass SSO authentication for certain user agents

[pradeepdubey]

Hi Folks,

I am using AzureAD/AEM SAML for SSO user authentication.

It is working as expected. We have coveo agent/connector which need to access sitemap page for that we need to skip SSO authentication. 

Coveo agent trying to access sitemap page form dispatcher url. For this SSO authentication need to bypass.

I tried adding user agents in Apache Sling Referrer Filter

Exclude Regexp User Agent to skip this authntication if request comes from these agents.

Still no luck.

Could you guys please help me on this.

Appreciate your help.

Thanks,

Pradeep

[Jörg_Hoh]

Please disregard this approach, as a header of a HTTP request can be changed very easily.

Instead I would configure the authentication not to require authentication when accessing these sitemaps.

[pradeepdubey]

We need to access entire site from coveo agent without authentication, not only site map page.

Any suggestions highly appreciated. 

Thanks,

Pradeep

[Jörg_Hoh]

Can't Coveo use authentication for access as well? 

[aanchal-sikka · Accepted solution]

Please use the token-based authentication for restricted content. For details, please refer to https://experienceleague.adobe.com/en/docs/experience-manager-learn/getting-started-with-aem-headles....

[kautuk_sahni]

@pradeepdubey Did you find the suggestions from users helpful? Please let us know if more information is required. Otherwise, please mark the answer as correct for posterity. If you have found out solution yourself, please share it with the community.