Try OpenEdge Now
skip to main content
Administration
REST Administration : REST Web Application Administration : Managing REST Web applications : SSO support for REST Web applications : OEClientPrincipal properties
 
OEClientPrincipal properties
The OEClientPrincipalFilter is a standard Spring security filter bean. It is declared in the Spring security configuration files in which its properties can be customized to override the defaults.
The following table describes all the property names:
Table 79. OEClientPrincipal properties
Property name
Description
Datatypes
Default
Range
enablecp
Specifies if SSO is enabled or disabled.
Boolean
true
true or false
domain
Specifies Web application's domain name
String
<webapp- name>
ASCII
roles
Specifies comma-separated list of ROLE names. You use this to perform Role-Based-Authentication (RBA) inside your business application.
String
-
ASCII
authz
Specifies comma-separated list of ROLE names
String
-
ASCII
expires
Specifies the data expiration time in seconds.
String integer
0
0 to n
accntinfo
Specifies the Spring token account state properties
Boolean
-
true or false
properties
Specifies a map, a collection of property name entries.
Map
-
String property name and value
ccid
Specifies if CCID is enabled or disabled.
Boolean
true
true or false
"key"
The key to be used for sealing the C-P
String
""
Cleartext or oech1::xxxx where xxxx is the ouput of genpassword utility
"registryFile"
The domain registry file used to seal the C-P NOTE: You need to configure either "key" or "registryFile"
File path
null
generated using the gendomreg utility.1
anonymous
Specifies if the AppServer is being called from an anonymous Web application user or not.
Boolean
true
true or false
sealAnonymous
Property to seal the anonymous C-P token using "key" or "registryFile"
Boolean
false
true or false
1 To use gendomregistry, create a .csv file with domain and domain access code. For example: Create a domain.csv file as follows: acme.com,letmein acme.eu,secret . Use the gendomreg utility to create a registry file. To create a registry file with name as domain.bin, run the command gendomreg domainPasses.csv domains.bin