Can SAML and a local accout co-exist?
Article ID: 241320
Updated On:
Products
Issue/Introduction
Can SAML and localaccount co-exist? Can we configured both SAML and a non-SAML user to log in and use Spectrum?
If SAML integration fails, can I still log on OneClick console with local accounts?
We have REST integrations as well that do not use SAML. How can those accounts be configured so they can run REST queries when SAML is enabled?
Resolution
You can achieve this by configuring that user model in the $SPECROOT/tomcat/conf/non-saml-config.xml file. It looks like this:
tomcat/conf/non-saml-config.xml
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<NonSamlConfig>
<allowBasicAuthentication>true</allowBasicAuthentication>
<userName>spectrum_user</userName>
</NonSamlConfig>
Be sure to change the allowBasicAuthentication to true
Change the "spectrum_user" entry to your local spectrum username and cycle tomcat.
You can add multiple <userName>USER</userName> tags. One for each user.
For example:
tomcat/conf/non-saml-config.xml
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<NonSamlConfig>
<allowBasicAuthentication>true</allowBasicAuthentication>
<userName>spectrum_user</userName>
<userName>spectrum_user2</userName>
</NonSamlConfig>
Additional Information
Take note the non-saml-config.xml file may look like this out of the box, missing the opening <userName> tag:
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<NonSamlConfig>
<allowBasicAuthentication>false</allowBasicAuthentication>
<userName/>
</NonSamlConfig>
Make sure it looks like the entry in the Resolution which has an opening and closing userName parameter. For example:
<userName>spectrum_user</userName>
Feedback
