com.sap.core.connectivity.api.authentication
Interface AuthenticationHeaderProvider

public interface AuthenticationHeaderProvider

The AuthenticationHeaderProvider provided methods for generation of authentication headers for access to on-premise systems and applications deployed on the same HCP landscape.
Web applications can access AuthenticationHeaderProvider via JNDI lookup or resource injection.

Method Summary

AuthenticationHeader	getAppToAppSSOHeader(String requestURL) Generates authentication header for SSO with other applications on the same landscape.
AuthenticationHeader	getPrincipalPropagationHeader() Generates header for principal propagation to on-premise systems.

Method Detail

getAppToAppSSOHeader

AuthenticationHeader getAppToAppSSOHeader(String requestURL)

Generates authentication header for SSO with other applications on the same landscape. Generated header can be used only once and only for the specified request URL.
SSO Header is valid only between applications which are working on behalf of one and the same account for which SSO is allowed.
There are three prerequisites for using application-to-application SSO:

• Both applications must reside in the same account
• Principal Propagation must be enabled for the account
• The receiving application must use SAML2 authentication

Parameters:

requestURL - the URL for which the generated headers will be used.

Returns:

Authentication header which can be used for SSO with other applications on the same landscape.

getPrincipalPropagationHeader

AuthenticationHeader getPrincipalPropagationHeader()

Generates header for principal propagation to on-premise systems.

Returns:

Authentication header which can be used for principal propagation to on-premise systems.