Authentication Methods in Applications Manager

Authentication Methods in Applications Manager

Authentication involves validating an incoming user to facilitate the access to a specific resource. There are various authentication methods that you can use - based on the requirements and usage. In recent times, numerous organizations are increasingly leveraging the capabilities of token based authentication as compared to basic authentication as it aids in enhancing user experience and also comes with several advantages.
 
Token Based Authentication
 
Token based authentication involves the use of a token (sometimes known as an access token) - an alphanumeric key that is used to identify a particular user. It is stateless, more secure and is an effective, hassle-free method of authentication.
 
Applications Manager leverages the capabilities of token based authentication to facilitate data collection for some monitors from secure end point URLs. Applications Manager provides two token based authentication method options :
 
OAuth:

Open Authorization (OAuth) is an open standard framework that gives applications the power to authenticate the access to a resource in a secure, specific way without actually sharing the primary log on credential details. It acts as a third party user agent that delegates the authorization process.
 
With Applications Manager, you can configure an OAuth Provider which generates an Access Token that can be used to authenticate an API endpoint secured by OAuth 2.0 in the desired monitor. This token which is stored in Applications Manager is then used to access the URLs from which data is collected for the monitor.

You can configure an OAuth provider by navigating to Admin -> Discovery & Data Collection -> OAuth Provider -> Add OAuth Provider.
 


Monitors that support OAuth Authentication:
  1. REST API Monitor
  2. REST API Action
  3. Google Cloud Platform Monitor
  4. ServiceDeskPlus Cloud
  5. Site24x7 Integration
  6. Mail Server
  7. Microsoft Azure Monitor
If you want to know more about configuring an OAuth Provider in Applications Manager, refer to this link.
 
Web Tokens:
 
Web tokens enable two parties to transfer information securely. It is a simple request to an end point URL based on the token response path. Applications Manager enables you to configure web tokens globally which can be used by the monitors for data collection.
 
Applications Manager supports 4 possible formats of Token Response path which can be used for the REST API monitor:
  1. JSON
  2. XML
  3. Header
  4. Text
You can create a Web Token by navigating to Admin -> Discovery & Data Collection -> Web Token -> Add new Web Token.
 
To know more about creating a Web Token in Applications Manager, refer to this link.
 
Common questions on token based authentication:
 
Why should I choose Applications Manager's token based authentication methods while adding monitors?
 
Tokens are stateless, and enable a more secure way of authentication. This is one way to ensure that passwords are be decoded and catastrophic incidents can be avoided.

      New to ADSelfService Plus?

        Resources

            • Related Articles

            • Configuring Zoho as an OAuth Provider in Applications Manager

              Zoho's OAuth token is used to access services in Applications Manager like integration with Site24X7, integration with Service desk, access to Zoho Mail APIs etc. As it seems a daunting task to go through all the documentation of the product, here ...
            • Disable HTTP access in Applications Manager

              Overview This article describes configuring a secure connection between Applications Manager server and the browser/client. Applications Manager can be accessed through any of the following URLs: For HTTP  -> http://[hostname/ip-address]:[http-port] ...
            • Troubleshooting Authentication Failed error

              Authentication Failure Authentication failure occurs when the request to a resource is missing or has invalid credentials.  Check if URL requires authentication Access the URL in an incognito/private window and check if any pop up asking for ...
            • How to Integrate Site24x7 with Applications Manager

              To integrate a Site24x7 account with Applications Manager, you need to configure and add OAuth Provider first Steps to configure and add OAuth Provider for Site24x7 Integration Visit https://api-console.zoho.com/ (If your account belongs to another ...
            • Configuring SAML authentication for Microsoft AD FS in Applications Manager

              Follow the steps given below to configure SAML authentication for Azure ADFS in Applications Manager: The first part of this process includes configuring AD FS. If you want to do this manually, start following from Step 4. 1. Open AD FS ...