EducationSoftwareStrategy.com
StrategyCommunity

Knowledge Base

Product

Community

Knowledge Base

TopicsBrowse ArticlesDeveloper Zone

Product

Download SoftwareProduct DocumentationSecurity Hub

Education

Tutorial VideosSolution GalleryEducation courses

Community

GuidelinesGrandmastersEvents
x_social-icon_white.svglinkedin_social-icon_white.svg
Strategy logoCommunity

© Strategy Inc. All Rights Reserved.

LegalTerms of UsePrivacy Policy
  1. Home
  2. Topics

KB39422: How to modify the web.xml file to enable SAML in MicroStrategy Web and Mobile JSP 10.6-11.0?


Yuxia Zhang

Quality Engineer • MicroStrategy


This is a document regarding the steps to modify the web.xml file in order to enable SAML in MicroStrategy Web and Mobile JSP.

Question:
How to modify the web.xml file to enable SAML in Strategy Web and Mobile JSP 10.6 -11.0?
Answer:
To enable SAML in a web application, modify the web.xml file, located in the WEB-INF folder of the Strategy Web installation directory.
Note: Backup the web.xml file before modifying the web.xml. The original web.xml will be used to disable SAML when needed.
1. Locate the below content in the web.xml file.
 


<!-- SAML Config GUI -->

    <servlet>
        <servlet-name>samlConfig</servlet-name>
        <servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>
    </servlet>
    <servlet-mapping>
        <servlet-name>samlConfig</servlet-name>
        <url-pattern>/saml/*</url-pattern>
    </servlet-mapping>

  <!-- End SAML Config GUI -->


2. Copy the content of the WebXmlChanges.txt file located in the WEB-INF/classes/resources/SAML/stage folder and paste it to the web.xml file as below.

<!-- SAML Config GUI -->  
   <servlet>
        <servlet-name>samlConfig</servlet-name>
        <servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>
    </servlet>
    <servlet-mapping>
        <servlet-name>samlConfig</servlet-name>
        <url-pattern>/saml/*</url-pattern>
    </servlet-mapping>

[Paste the content of the WebXmlChanges.txt file here]

  <!-- End SAML Config GUI -->

3. Delete the below security constrains for Administrator, TaskAdministrator and TaskDeveloper in web.xml.

<security-constraint>
    <web-resource-collection>
      <web-resource-name>Administrator</web-resource-name>
      <url-pattern>/servlet/mstrWebAdmin</url-pattern>
      <url-pattern>/servlet/mstrWebAdmin/*</url-pattern>
      <url-pattern>/servlet/mstrWeb/mstrWebAdmin</url-pattern>
      <url-pattern>/servlet/mstrWeb/mstrWebAdmin/*</url-pattern>    
    </web-resource-collection>
    <auth-constraint>
      <role-name>admin</role-name>
    </auth-constraint>
    <user-data-constraint>
      <transport-guarantee>NONE</transport-guarantee>
    </user-data-constraint>
  </security-constraint>
  <security-constraint>
    <web-resource-collection>
      <web-resource-name>TaskAdministrator</web-resource-name>
      <url-pattern>/servlet/taskAdmin</url-pattern>
      <url-pattern>/servlet/taskAdmin/*</url-pattern>       
    </web-resource-collection>
    <auth-constraint>
      <role-name>admin</role-name>
    </auth-constraint>
    <user-data-constraint>
      <transport-guarantee>NONE</transport-guarantee>
    </user-data-constraint>
  </security-constraint>
  <security-constraint>
    <web-resource-collection>
      <web-resource-name>TaskDeveloper</web-resource-name>
      <url-pattern>/servlet/taskViewer</url-pattern>
      <url-pattern>/servlet/taskViewer/*</url-pattern>          
    </web-resource-collection>
    <user-data-constraint>
      <transport-guarantee>NONE</transport-guarantee>
    </user-data-constraint>
  </security-constraint>

4. Save the web.xml file. 


Comment

0 comments

Details

Knowledge Article

Published:

December 29, 2017

Last Updated:

November 12, 2018