Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

After changing the configuration, a customized version of the start page is generated for the WebAssembly-based GUI, which references other JavaScript libraries. Since the browser may use an old version of this page from the browser cache the next time it is called, this may result in errors while executing JavaScript code. In this case, force the cached page to be refreshed by holding down the Shift key while clicking the refresh page button in the browser.

Verwendung von Basic Authentication für Connections

When using Azure AD, there are a few things to keep in mind if you want to authenticate individual connections using the HttpBasicAuthenticationHandler server handler:

  1. The app registration for the server application must be adapted to allow logon via user and password. To do this, activate the "Allow public client flows" option under Authentication → Advanced settings.

  2. Two-factor authentication must not be active for the user used, as this prevents logging in using a user name and password.

  3. The user used must have already successfully logged in to the Connect Server backend (URI .../server) at least once and agreed to the requested permissions.

  4. Currently, only the combination of user and password is checked for validity. Requesting specific scopes may be enabled in later versions of Connect Server.

Especially for a publicly accessible Connect Server, the configuration changes described above represent a weakening of security, so the risk and benefits of this scenario should be carefully assessed.