Authenticate via Basic Auth or Client Certificate aga...

[#1]

Hello,

We would like to use the event notification options of C4C to send events directly to a CAP application in Cloud Foundry. Since only Basic Authentication and SSL Client Certificate are available in C4C for event notifications, the question arises whether it is even possible to authenticate to a CAP application via Basic Auth or Client Certificate. Our subaccount is connected to a Custom Identity Provider (Azure AD) and our CAP application uses “XSUAA” as authentication method.

Is there any way to use Basic Auth or Client Certificate to authenticate to a CAP backend service configured with “XSUAA” authentication method?

Many thanks in advance and best regards
Kai-Frederik Engel

[gregorw]

If you have a custom IAS connected via OpenID Connect to your BTP subaccount you can create a local user with confirmed E-Mail address and changed password there. This user can be used for basic authentication via the approuter when you configure a route with authenticationType basic.

[kaio716]

Thank you for your contribution! We have currently connected Azure AD to our subaccount via SAML. Are there similar options for accessing routes from CAP services via XSUAA using Basic Auth/Client Cert?

[gregorw]

Basic Authentication doesn't work when the Azure AD is connected via SAML. IAS is a must. You do not want to use Basic Authentication with CAP in production.