KB486032: Set Mobile Configurations When Using Basic Auth for Admin Rather than SAML

Description

Starting in MicroStrategy 2021 Update 2, the MicroStrategy Mobile server admin pages support SAML and basic authentication when SAML authentication is enabled.

There are some known limitations when using basic authentication for configuring mobile:
 

1. The getProjects task is protected by SAML authentication since the taskProc endpoint is protected by default.
2. Under some circumstances, you may want to access the getProjects task without authentication.

Workaround

To resolve this issue, add the getProjects task to the white list that doesn’t require authentication.

Add the beans that needs to be customized from SpringSAMLConfig.xml and make your customization. Added to WEB-INF/classes/resources/SAML/custom/SAMLConfig.xml.  The below example added “getProjects” to taskRequestMatcher:

^{<?xml version="1.0" encoding="UTF-8" ?>}

^{<beans xmlns="http://www.springframework.org/schema/beans"}

^{xmlns:security="http://www.springframework.org/schema/security"}

^{xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"}

^{xmlns:context="http://www.springframework.org/schema/context"}

^{xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.1.xsd}

^{http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security.xsd http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context-3.1.xsd">}

^{<!-- Beans to customize the SAML login -->}

^{<bean id="tasksRequestMatcher" class="com.microstrategy.auth.TaskRequestMatcher">}

^{<constructor-arg>}

^<list>

^{<value>arch.search</value>}

^{<value>arch.saveDBRole</value>}

^{<value>isSessionAlive</value>}

^{<value>closeSessions</value>}

^{<value>getPluginsVisList</value>}

^{<value>getProjects</value> <!-- NEW -->}

^</list>

^{</constructor-arg>}

^</bean>

^</beans>