Question
Eviden
NL
Last activity: 4 Sep 2019 7:50 EDT
Login Operator via Post without Authentication
Requirement:
Login user based on e-mailaddress, received via post, and create case.
Possible solution:
I would think the service accelerator (https://community.pega.com/knowledgebase/create-services-service-accelerator) would be of help.
There are multiple options available:
- Create and manage work
- Invoke existing activity rules
- Process input or output data
However, I am not sure which is most suited for the requirement.
- Authentication is completed outside of Pega, which results in an e-mailaddress.
- The e-mailaddress is received via a post.
- Logging in via e-mailaddress only, without password.
- And create a case.
Using the External Unauthenticated Access Group is not an option, as users can have different roles (ex. admin, author, etc).
Currently running: Pega 8
All help is appreciated!
Pegasystems Inc.
US
Hi,
For external PRCustom authentication a password not required. If you look at the AuthService record on the Custom tab there is a drop down for "Source of Operator Credentials". When that is set to "Use externally stored credentials" and the operator record has "Use external Authentication" set then the operator records password is not checked.
At some point you will have to create the operator record in PRPC. This could be done outside of authentication or during the users first authentication attempt. Your login activity can dynamically create the user record as PRCustom authentication you return a page of Data-Admin-Opertator-ID and the engine layer will either add the record or update the record. You don't even issue a save in the authentication activity.
Part of your authentication will also have to verify if the email address provided has access to the system. You might have secruity setup before PRPC can even be called like Siteminder, WebSEAL etc.
I have something similar I use for testing. I will update this thread later today with some screen shots.