IDM REST: How to connect as anonymous?

[Former Member]

Hello Guru,

We have IDM 7.2 SP9 on Oracle11.

We want to use IDM REST API v2 (http://host:port/idmrestapi/v2/service).

How external system can connect to IDM REST service without authentication (as anonymous or guest, as example)?

I can't find any documentation about how to use anonymous logon for Netweaver Java applications, only "Using Anonymous Logon to Access the Portal".

Could you please help me?

Best regards,

Natalia.

[Former Member]

Hi Natalia,

In what case you intend to use anonymous access?

Usually we have anonymous user access for password reset form or a self-registration form.

Normally for the calls to URIs it is required the user to authenticate and the user must have the UME actions "idm_authenticated" and the "idm_authenticated_restapi". So I think there is no way to make anonymous call to the rest API.

Best wishes,

Fedya

[Former Member]

Dear Fedya,

We have business processes built on SharePoint product. Our problem is:

Browser enabled Infopath form must retrieve data from SAP IDM identities using REST request to restapi.

But authentication mechanisms required by SAP IDM restapi (BASIC, DIGEST) are not allowed by SharePoint for GET requests (REST web services using GET request format).

Authentication mechanisms that allowed for GET request format are NTLM and KERBEROS.

But I do not see NTLM and KERBEROS as authentication methods for sap.com/tc~idm~rest~ear*idmrestapi.  Only the standard authentication templates on the AS Java:

• SAP-J2EE-Engine
• Basic
• Client
• Digest
• Form
• Ticket
• Evaluation assertion ticket

So we decided to try Anonymous acces.

Maybe somebody can propose other solution - how to solve this problem.

Best regards,

Natalia.

[Former Member]

Hi Natalia,

As I see you have listed the available used templates, but you can also leave used template blank and use a login module and then if you choose SPNegoLoginModule you will have Kerberos authentication.

You have to make the corresponding configuration in NWA -> Configuration -> Authentication & Single Sign-On -> SPNEGO.

You can find more information here:

http://help.sap.com/saphelp_nw74/helpdata/en/4a/3fc8279c09044fe10000000a421937/content.htm

Best wishes,

Fedya