Use proxy server for authentication

The Intrexx Portal Manager can be connected to the Intrexx Portal Server via a proxy server. This is also possible if the Portal Manager and Portal Server are located in different networks.

Authentication methods

You have three options to configure authentication on the proxy server:

  • You can choose not to use authentication

  • Basic authentication

  • Kerberos authentication

You can activate a proxy server and specify the authentication method in the Portal Manager in the main menu under "Extras > Options".

You can also access the server with the Portable Portal Manager.

Advantages of a proxy server

With a proxy server, you can insert an additional "security layer" between the Portal Manager and the Portal Server. The proxy server can monitor the communication between the Portal Manager and Portal Server. You can define users who must first authenticate to the proxy server before they can access the portal server.

The login dialog is only displayed if you have selected the "Basic authentication" option. When using Kerberos authentication, no separate login is required.

The proxy server described in this chapter ensures authentication of a Portal Manager user to the portal server.

In contrast, the front-end web server (reverse proxy) controls the authentication of portal users to the portal. See the following section: Using the front-end web server (reverse proxy).

Configure proxy server for authentication

Step-by-step guide

To configure a proxy server to authenticate a Portal Manager user to the portal server, please proceed as follows:

  1. Click on Extras > Options in the main menu.

    The "Options" dialog box is displayed.

  2. Select the "Proxy" entry in the left-hand navigation area.

    The right pane displays the various options for configuring the proxy server.

    Name

    Description

    No proxy

    Select this option if you are not using a proxy server for authentication.

    This option is selected by default.

    Apply proxy configuration of operating system

    		 Select this option if you want to adopt the proxy settings of your operating system.

    Configure proxy manually

    		 Select this option if you want to configure the proxy settings manually. You can then set which form of authentication should be performed for the proxy.
    Proxy without authentication Select this option if you are using a proxy server and if authentication on the proxy server is not required.
    Proxy with basic authentication Select this option if you are using a proxy server and if the user authorizes himself via basic authentication on the proxy server.

    Proxy with Kerberos authentication

    Select this option if you are using a proxy server and if the user authorizes himself via Kerberos authentication on the proxy server. In this case you can define your own Kerberos configuration file (see below).

    Host

    Enter the host of the proxy server here. This can be the IP or the URL of the proxy server.

    Port

    Enter the port of the proxy server here. Port 3128 is often used.

    No proxy for:

    If you use a proxy but want to exclude certain hosts (e.g. within your internal company network) from access via the proxy, you can enter them here. Separate the individual hosts with a comma.

    Do not use a default Kerberos configuration file

    Activate this checkbox if you want to use your own Kerberos configuration file to configure authentication on the proxy server.

    Kerberos configuration file

    Enter the path to the Kerberos configuration file here or search for the file using the icon.

  3. Select the desired option and fill in the required information.

  4. Click on "OK".

  5. Restart the Portal Manager so that the settings you have made take effect.

    You have configured a proxy server for authentication.

    The next time you start the Intrexx Portal Manager, you will be prompted to enter your authentication details for the proxy server.

Proxy server login

After you have set up a proxy server with the "Basic authentication" option, you will first be asked to identify yourself on the proxy server when you start the Intrexx Portal Manager.

Login to the Portal Manager without authentication on the proxy server

You can also log in to the Intrexx Portal Manager without logging in to the proxy server. This may be desired for activities where the connection to the portal server is not required.

To do this, cancel the login dialog for the proxy server. Confirm the subsequent message with "Yes". After that, do not connect to the portal server.

More information

Objects, classes and attributes

Create object

The areas of the "User" module

Options

User groups and users

Schema manager

User account

Filters in the Users module

Replication - user and group import

Portal login via identity providers