<!DOCTYPE html>
<html><head>
<meta charset="UTF-8">
</head><body><p>Hello Midpoint team,</p><p>Please be informed that our company (8K Miles Software Services) is the partner with Evolveum (Please find the link <a href="https://evolveum.com/partners/8k-miles/">https://evolveum.com/partners/8k-miles/</a>) and we are working on a requirement based on a feedback from a prospect. We would like to inform you that the required use case is working in Midpoint 3.6, whereas while replicating the same in 3.9 version we are not able to proceed. Regarding this, we would like to get clarifications on Midpoint being able to accept the “authentication” based upon the availability of username in the HTTP header.</p><p>Using Midpoint version 3.6, we are able to accept the http header based authentication using the following steps.</p><ol><li>Changes to the config file <a href="gui/admin-gui/src/main/webapp/WEB-INF/ctx-web-security.xml">gui/admin-gui/src/main/webapp/WEB-INF/ctx-web-security.xml</a></li></ol><p>Uncommenting following line:</p><ol><ol><li><custom-filter position="PRE_AUTH_FILTER" ref="requestHeaderAuthenticationFilter" /></li></ol></ol><ol><ol><li><beans:bean id="requestHeaderAuthenticationFilter" class="org.springframework.security.web.authentication.preauth.RequestHeaderAuthenticationFilter"></li></ol></ol><p> <beans:property name="principalRequestHeader" value="SM_USER"/></p><p> <beans:property name="authenticationManager" ref="authenticationManager" /></p><p></beans:bean></p><ol><li>Posting the following header to <a href="/midpoint/spring_security_login">/midpoint/spring_security_login</a></li></ol><p>SM_USER: {Username}</p><p>Note: Username corresponds to name of the user object in MidPoint</p><p>However, we are not able to replicate the same in Midpoint version 3.9 as we are not able to identify the config file <a href="https://apc01.safelinks.protection.outlook.com/?url=ctx-web-security.xml&data=02%7C01%7Cppradeep%408kmiles.com%7Ce3098cf571f144a52ac508d7158be30b%7C39282642841847f5bdec4c1dfbcf42e9%7C0%7C0%7C637001562959867414&sdata=V4RKL1fhRyrTrmgpwQrIetdwT2BZlwOO%2Byty7%2B%2B0J8U%3D&reserved=0">ctx-web-security.xml</a>. Kindly confirm, if the above functionality is supported in Midpoint 3.9 either directly or indirectly. Kindly revert for any clarifications.</p><p><br></p><p>Note : While replying please copy to this email <a href="mailto:ppradeep@8kmiles.com">ppradeep@8kmiles.com</a></p><p><br></p><p>Thanks,</p><p>Pradeep</p><p><strong>Manager - Partner Relations </strong></p><p>|O: 650 242-9887 |M: +91 9940240394|</p><p>|e-Mail: <a href="mailto:ppradeep@8kmiles.com%7C">ppradeep@8kmiles.com|</a></p><p><a href="http://www.8kmiles.com/">http://www.8kmiles.com</a></p></body></html>