Appian Community
Site
Search
Sign In/Register
Site
Search
User
DISCUSS
LEARN
SUCCESS
SUPPORT
Documentation
AppMarket
More
Cancel
I'm looking for ...
State
Not Answered
Replies
4 replies
Subscribers
7 subscribers
Views
2628 views
Users
0 members are here
Share
More
Cancel
Related Discussions
Home
»
Discussions
»
Administration
Is it possible to create certificate-based authentication for a Web API? The pur
judym598
Certified Senior Developer
over 9 years ago
Is it possible to create certificate-based authentication for a Web API? The purpose would be for an external system to execute a Web API on our Appian cloud-based application to retrieve data on a daily basis. It was my understanding that it would have to be done with a username/password that would have to be changed regularly. Is that still true?
OriginalPostID-198437
OriginalPostID-198437
Discussion posts and replies are publicly visible
0
abhi.jana
Appian Employee
over 9 years ago
Based on the docs It should be possible since Web APIs use the same Authentication as the rest of Appian
forum.appian.com/.../Web_APIs.html
and Appian does support certificate based authentication
forum.appian.com/.../Authentication.html
However If the requirement is to have separate authentication mechanisms for Appian and Web APIs then it may not be supported.
Cancel
Vote Up
0
Vote Down
Sign in to reply
Verify Answer
Cancel
0
judym598
Certified Senior Developer
over 9 years ago
Thanks Abhi - I haven't worked with Web APIs in the past but based on the documentation, it looks like I'd have to use a HTTP basic authentication to invoke the Appian Web API from another system. In this case, the external system would use the 'GET HTTP' method to retrieve data using the Web API but I'm not sure to set up the authentication scheme for that.
Cancel
Vote Up
0
Vote Down
Sign in to reply
Verify Answer
Cancel
0
Andrew P Gramann
Certified Lead Developer
over 9 years ago
Web APIs will work with any Appian supported authentication mechanism. In order to get certificate based authentication to work, you need to set up an identity provider (external to Appian), and then configure Appian to use SAML to connect to that identity provider. Appian will then forward certificate based authentication requests to an external identity provider that will process the certificate.
HTTP Basic Authentication is a username / password based authentication mechanism. Most tools that support REST have it built in, and you should be able to find the protocol specifics by looking through their documentation. The basic idea is that the http client sends a special header with it's HTTP requests that encodes the user name and password in a specific format.
Cancel
Vote Up
0
Vote Down
Sign in to reply
Verify Answer
Cancel
0
judym598
Certified Senior Developer
over 9 years ago
Thanks #andrewg! That helps a lot!
Cancel
Vote Up
0
Vote Down
Sign in to reply
Verify Answer
Cancel