Do we need 2 authentication systems for camunda when using companies Active Directory for readonly auth?

[jonathan.lukas]

Hello @drogba ,

the REST API can use the same IdentityProvider than the Webapp, as the Authentication and Authorization is part of the engine itself.

So basically every request towards the REST API can be done by any authenticated and authorised user. The Authentication mechanism can be handled in the Filter Implementation you are using. Please find an example for this filter here:

Turn On Basic HTTP Authentication for REST API in Spring Boot

Hello, I’m new in camunda. I read this document about Basic HTTP authentication https://docs.camunda.org/manual/7.6/reference/rest/overview/authentication/ How to turn on Basic HTTP Authentication for REST API in Spring Boot? Can someone help me with example to configure it? Thank you.

This example is for the Spring Boot distro and used Basic HTTP Auth as mechanism.

Hope this helps

Jonathan