Web API Authentication

RE: Web API Authentication

joanneh — Wed, 13 Dec 2017 00:48:16 GMT

Thanks! Your answers is clear and definitely help!!

RE: Web API Authentication

aloks0189 — Tue, 12 Dec 2017 07:28:06 GMT

Hi ashleyk0001 I believe you can follow below steps to invoke Appian Web API from external systems.

1. Create a Web API which returns a JSON response

2. Navigate to Admin console and under Third Party Credentials, create an Entry, where if the user is of type Basic User then add this user or their respective groups to Web API security, but if user is of type Admin then no need of adding him to Web API security (To avoid Unauthorised Access Exception)

3. Now you can provide your Web API and Third party credentials username and password to third party system who wants to consume your service, and while invoking this API from external system, they can set preemptive to true()

You don't need to have SAML Authentication enabled for this.

Hope this will help you.

RE: Web API Authentication

joanneh — Tue, 12 Dec 2017 02:02:54 GMT

My question was originally "We have enabled SAML authentication, how does we authenticate the Web API from external system?"

So do you mean we should provide the username and password which is having access to that web api ( as the pic below), instead of passing any SAML authentication value from various users each time they login.

RE: Web API Authentication

kondetiv — Wed, 26 Jul 2017 00:43:50 GMT

If I understand your question correctly. You are trying to call your web api from external system then basically you no need to do anything. Provide your URL. And provide username and password which is having access to that web api(loot at the security settings of web api). That's enough, Appian automatically validates it.

You can test your web api in the below url.
https://www.hurl.it/

RE: Web API Authentication

ashleyk0001 — Tue, 25 Jul 2017 16:57:49 GMT

What do I change in my authentication settings so it allows for HTTP basic authentication?

RE: Web API Authentication

Dan Lluhi — Tue, 25 Jul 2017 15:00:47 GMT

Hi, there are two options per the documentation:

Standard forms-based login
HTTP basic authentication

I'd recommend reading more under "Authentication" here: docs.appian.com/.../Web_APIs.html