Skip to content

Commit ddb6ac0

Browse files
issue-4003 - Updating documentation with step to disable basic authentication
Signed-off-by: PrasannaHegde1 <[email protected]>
1 parent 52b686f commit ddb6ac0

File tree

1 file changed

+13
-0
lines changed

1 file changed

+13
-0
lines changed

docs/src/pages/guides/FHIRServerUsersGuide.md

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2792,6 +2792,19 @@ Here are some notes related to these authentication schemes:
27922792
* OAuth 2.0 authentication can only be used in conjunction with an HTTPS endpoint because the OAuth authorization steps rely on SSL handshake negotiations.
27932793
* Client certificate-based authentication can only be used in conjunction with an HTTPS endpoint since it involves SSL handshake negotiations. The main value of client authentication is that the server is able to securely authenticate the client through the use of certificates.
27942794

2795+
To disable basic authentication, add the below snippet under configDropins/overrides:
2796+
```xml
2797+
<server>
2798+
<webApplication id="fhir-server-webapp">
2799+
<application-bnd id="bind">
2800+
<security-role id="users" name="FHIRUsers">
2801+
<special-subject type="EVERYONE"/>
2802+
</security-role>
2803+
</application-bnd>
2804+
</webApplication>
2805+
</server>
2806+
```
2807+
27952808
### 5.2.3 Configuring mutual TLS authentication
27962809
To properly configure the FHIR server's keystore and truststore files, perform the following steps.
27972810

0 commit comments

Comments
 (0)