Hi, In our project we have requirement, the UI are designed in .Net and whe

When we deploy a servlet and want it be able to accessible without logging in, we add an entry to spring-security-02-unsecured-override.xml like this:

<sec:http pattern="/plugins/servlet/custom_servlet1/**" security="none"/>

So when you hit the URL /plugins/servlet/custom_servlet1 you will no longer get a login page. However, you are then responsible for implementing your own security on the servlet. Otherwise anybody could hit that URL and pull the data. We typically implement Basic Authentication and pass the credentials in the header.

This is on release 7.3 so things might be different in a modern version of Appian.

Addition to preston comment:
forum.appian.com/.../

I have added an entry <sec:http pattern="/plugins/servlet/testAppianExample?reqType=getTaskList" security="none" />
in this path \\runtime_ear\\suite.ear\\web.war\\WEB-INF\\conf\\security\\spring-security-02-unsecured-override.xml, but it still asking for login.

This is what i got from documentation, did you try this one?

1.Change the url-pattern element in the appian-plugin.xml to <url-pattern>/stateless/tasklist</url-pattern> to make the servlet a stateless servlet. This will cause the servlet to no longer require an authenticated session and instead will protect it using HTTP Basic authentication.