Question
HealthFirst Org
US
Last activity: 22 May 2024 9:59 EDT
Regarding using anonymous authentication service for user signup and operator ID creation
Hi,
Can we use the Anonymous Authentication service to create user signup page for an internet facing application.
Any security volubility and performance issues with below approach.
Below is how I am planning to design.
1. create a Anonymous Authentication service and configure a model operator.
2. create a model operator, guest access group, guest access application, Guest Portal with harness and section for user information and create/submit button configured.
3. configure the above create button to invoke new operator creation logic and send email to user with login url and password.
Can someone suggest if this approach has any drawbacks?
There will be no case type associated with above guest access application. Also, for the access group I am planning to use similar roles of PegaRULES:Guest and additionally added read access to Rule-Portal and Data-Portal classes.
Thanks
***Edited by Moderator Rupashree S. to add Capability tags***
Lantiqx Systems India Private Limited
IN
Hi @KRISHNAPAVANP there will be no drawbacks for your approach,but the only thing need to be checked is Anonymous Authentication service will available for user portal only.
HealthFirst Org
US
I tried the the above approach, one issue I observed is session timeout is more than 1hour of the guest user session.
Is there a way to default the idle session time to 1 or 2 mins and remove the requestor session if idle for more than 2 mins.