The HTTP Basic Authentication performs a login/password authentication against a specified webservice that requires HTTP Basic Authentication. This scheme is similar to HTTP authentication backend but requires users to be already added to any backend (Database or LDAP). The advantage is that you can specify different scopes for each users and add any other additional data for the users.
In the administration page, go to Parameters/Authentication schemes
and add a new scheme by clicking on the +
button. In the modal, enter a name and a display name (the name must be unique among all authentication scheme instances), and a scheme session expiration in seconds.
Select the type HTTP Basic Authentication
in the Type drop-down button.
Below is the definition of all parameters.
Name (identifier) of the scheme, must be unique among all the scheme instances, even of a different type.
Name of the instance displayed to the user.
Number of seconds to expire a valid session.
Maximum number of times a valid authentication with this scheme is possible. This is an additional parameter used to enforce the security of the session and forbid to reuse this session for other authentications.
If this option is unchecked, only administrator can register this scheme for every user via the administration page.
URL of the HTTP service to connect to.
Check this option if the HTTP service uses TLS and if you want to validate the certificate.
This option can be used to build the auth_basic_user
value using the user properties values in a specified format. You can use any user property values as long as it is not a list. The property must be specified surrounded by {}
.
Format examples:
{username}@glewlwyd.tld
{domain}/{username}
{specific_property}_{phone}