Basic Authentication on AMS Author Instance | Community
Skip to main content
November 3, 2023
Solved

Basic Authentication on AMS Author Instance

  • November 3, 2023
  • 2 replies
  • 911 views

We want to enable basic authentication to access servlets at the /bin/<project> on author instances.

 

This approach is working perfectly fine on Publisher with some dispatcher config updates.

 

What configuration would be needed to allow /bin/<project> with Basic Auth on AMS author environment?

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by MarkusBullaAdobe

Hi @sonaliku!

As already mentioned by @dprakashraj, AMS setups come with a Dispatcher for both, Publish and author side. So you should be able to enable Basic Authentication for a specific path (e. g. /bin/project as mentioned in your question) by adding the according configuration to your webserver configuration.

 

There are other things to consider, though:

  • If you are using Cloud Manager for deployments, Basic Authentication is not recommended. It might conflict with Cloud Manager testing capabilities. The test agent/client could receive an HTTP 403 Forbidden response and the testing step would fail.
  • You could also think about adding authentication on AEM level for your servlets. Especially on author side, this would allow you to leverage the existing authorization and authentication capabilities of AEM and handle permissions for servlet access with your overall permission concept.

Hope this helps!

2 replies

DPrakashRaj
Community Advisor
Community Advisor
November 4, 2023

In AMS author and publisher are both behind the dispatcher. Please check the filter rules in dispatcher configs for author, if you are allowing the servlet path in allow rule. Should have similar dispatcher configuration on author for this servlet like dispatcher for publisher.

 

MarkusBullaAdobe
Adobe Employee
MarkusBullaAdobeAdobe EmployeeAccepted solution
Adobe Employee
November 6, 2023

Hi @sonaliku!

As already mentioned by @dprakashraj, AMS setups come with a Dispatcher for both, Publish and author side. So you should be able to enable Basic Authentication for a specific path (e. g. /bin/project as mentioned in your question) by adding the according configuration to your webserver configuration.

 

There are other things to consider, though:

  • If you are using Cloud Manager for deployments, Basic Authentication is not recommended. It might conflict with Cloud Manager testing capabilities. The test agent/client could receive an HTTP 403 Forbidden response and the testing step would fail.
  • You could also think about adding authentication on AEM level for your servlets. Especially on author side, this would allow you to leverage the existing authorization and authentication capabilities of AEM and handle permissions for servlet access with your overall permission concept.

Hope this helps!