NetOps Portal - Anonymous login not working in NetOps 23.3.x

Products

• Network Observability
• CA Performance Management

Issue/Introduction

After the NetOps Portal upgrade from 22.2.11 to 23.3.6, it is no longer possible to use an anonymous login.
This is used to specify a username that is used to authenticate the user automatically into NetOps Portal, bypassing the Sign-In page.

The settings from SsoConfig tool are the same as in release 22.2.11, where this option was working , but it now always requires a user and password to login.

1. Remote Value
2. Local Override
Choose an option > 2
SSO Configuration/DX NetOps/Single Sign-On/Local Override:
1. Anonymous User Enabled: Enabled
2. Anonymous User ID: 2
3. Localhost User Sign-In Page Enabled: Disabled
4. Localhost User Enabled: Enabled
5. Localhost User ID: 2
6. Cookie Timeout Minutes:
7. Encryption Decryption Key:
8. Encryption Algorithm:
9. Failed Sleep Seconds:
10. Remember Me Enabled:
11. Remember Me Timeout Days:
12. Scheme: https
13. Port: 8382
14. Virtual Directory:
15. Scheme for Data Sources: https
16. Port for Data Sources: 8382
17. Display Authentication Failure Details

Refer to Update the Single Sign-On Website Settings

Environment

NetOps Portal 23.3.x

Cause

The option for "Anonymous User" has been deprecated in NetOps 23.3.x for security hardening reasons.

Resolution

The feature for "Anonymous User" options for Local Override in SsoConfig tool has been deprecated in NetOps 23.3.x for security reasons.
Having no login requirement when using anonymous access is considered very insecure.

This option is disabled and no longer supported in NetOps Portal 23.3.x

Additional Information

We are in the process of disabling/removing the Anonymous User Options for Local Override changes from SsoConfig tool and from the NetOps techdocs.