How to configure anonymous authentication in Spotfire

How to configure anonymous authentication in Spotfire

book

Article ID: KB0071095

calendar_today

Updated On:

Products Versions
Spotfire Server 7.5 and higher

Description

Anonymous authentication allows anyone to access public information that is available for viewing on the Spotfire web client without prompting them for a user name or password. When configured, there are some things to check if you run into issues.

Issue/Introduction

This article provides guidance on configuring anonymous authentication in Spotfire, and also describes some issues that may occur.

Resolution

1). Configure anonymous authentication following the Configuring anonymous authentication instructions in the manual. Afterwards, export the latest Spotfire server configuration.xml. Check that it has the following: 
<anonymous-auth>
      <enabled>true</enabled>
    </anonymous-auth>

2). After you have enabled the guest account, do a user search in the Administration Manager to make sure the user is present: 
  guest@anonymous 

To enabled (depend on domain name style), you need use a command such as:
  config enable-user --username=guest@ANONYMOUS

3). If you see an ERROR like the following:
DEBUG 2017-02-01T15:44:46,205-0500 [guest@ANONYMOUS, #14789, #78451] server.security.SecurityFilter: The client is successfully authenticated
DEBUG 2017-02-01T15:44:46,236-0500 [guest@ANONYMOUS, #14789, #78452] server.security.SecurityFilter: Filtering request: HTTP GET /wp/OpenAnalysis on port 80 from 11.243.0.155 at port number 59611
ERROR 2017-02-01T15:44:46,268-0500 [guest@ANONYMOUS, #14789, #78452] method.annotation.ExceptionHandlerExceptionResolver: Failed to invoke @ExceptionHandler method: public void com.spotfire.server.wp.controller.WebPlayerExceptionController.rethrow(com.spotfire.server.security.UnauthenticatedException) throws com.spotfire.server.security.UnauthenticatedException
com.spotfire.server.security.UnauthenticatedException
    at com.spotfire.server.wp.controller.ViewAnalysisController.openAnalysis(ViewAnalysisController.java:245)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
    ...
make sure that the users/group: "Everyone", "Anonymous User" and "guest@ANONYMOUS" has browse+access rights to the folder with the analysis (info link and data source if used) and also the root folder (Library) and any folder in-between. The user must have access to all folders in the hierarchy.

Make sure that the pre-existing "Anonymous User" group has the same Licenses as the "Everyone" group.

Additional Information

Doc: Configuring anonymous authentication Doc: config-anonymous-auth