Enable the external authentication interface

The eai-auth stanza entry, located in the [eai] stanza of the WebSEAL configuration file, enables and disables the external authentication interface functionality. The external authentication interface can be implemented over HTTP, HTTPS, or both. External authentication interface authentication is disabled by default. To configure the external authentication interface:

1. Stop the WebSEAL server.

2. Edit the WebSEAL configuration file. In the [eai] stanza, specify the protocols to support in the network environment. The protocols are shown in the following table.

   Protocol	Entry
   HTTP	eai-auth = http
   HTTPS	eai-auth = https
   Both HTTP and HTTPS	eai-auth = both
   Disable external authentication interface (default)	eai-auth = none

   For example, to support both protocols:

   [eai]
   eai-auth = both

3. Restart the WebSEAL server.

When eai-auth = none (disabled), all other configured external authentication interface-related stanza entries have no effect.

Parent topic: External authentication interface configuration