pp108 : Anonymous User

Anonymous User

This topic describes the 'anonymous' identity type and its relevance to authentication.


Anonymous user can be used in situations where identification is not necessary. This can be useful in a portal to provide public information without logging in. The information presented to such users is not confidential or specific to a particular user.

Identity details are usually placed in the SOAP request. But in the case of anonymous users, no identity details are placed in the SOAP header and the Web server is configured to allow anonymous access.

When Process Platform is accessed anonymously, the built-in authenticated useranonymousis used. The ACL for that authenticated user is applied to every SOAP request.

The SOAP request will be executed only if the useranonymousis authorized to execute the SOAP request.

All the Web service operations that must be accessible anonymously have the ACL that allows access for the authenticated useranonymous.

The Web server must be configured explicitly to allow anonymous access. For the procedure to do this, refer to Configuring Anonymous Access in Apache and Configuring Anonymous Access in IIS.