AEM Author - SAML integration - Disabling CRXDE access | Community
Skip to main content
pankajrohira
pankajrohira
Level 2
Feb 22, 2018 3:30 PM UTC
Solved

AEM Author - SAML integration - Disabling CRXDE access

We have recently configured Author instance with SAML. The "Path" parameter is specified as "/" Root - (repository path for which this authentication handler should be used by Sling). The integration is working just fine. However when we are hitting "/crx/de/index.jsp" as anonymous user we are able to get to it. Shouldn't hitting CRXDE go to SSO login page too because Path parameter is configured as root.

Thanks.

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
joerghoh
joerghohAccepted solution
Employee
Feb 22, 2018 5:31 PM UTC

CRX DE Lite is not covered by Sling Security, it is a servlet configured outside of sling. Therefor you cannot use the security model of the repository itself to disallow access to /crx/de/index.jsp. The only way are dispatcher rules or webserver rules.

Jörg

View reply

2 replies

pankajrohira
pankajrohiraAuthor
Level 2
Feb 22, 2018 5:38 PM UTC

Thank you, I was under the same impression.

Translate
joerghoh
joerghohAccepted solution
Employee
Feb 22, 2018 5:31 PM UTC

CRX DE Lite is not covered by Sling Security, it is a servlet configured outside of sling. Therefor you cannot use the security model of the repository itself to disallow access to /crx/de/index.jsp. The only way are dispatcher rules or webserver rules.

Jörg

Translate
Terms & ConditionsAccessibility statement

Loading footer...