User Access

When deciding, which users will be authorized to interact with the profile running in the Compute service, Edifecs recommends that you create and use a dedicated application user account.

1. In Smart Trading Cloud, create a new application user.
2. In Edifecs Application Manager, for the XEServer profiles you want to run in the Compute service, for every XEngine component that references artifacts stored in the Cloud Repository, add the following parameter on the Processing Configuration tab of the component settings: XEngine.Settings.Authentication = {MD_REST_Header[Authrorization]}.
3. In Cloud Repository, share access to the project folder with the created application user.
4. For requests to be authorized, add the application user's credentials (CLAPP token) to the request header (click here for instructions on how to download the file with the application user token). For example:

"header": [
 {
   "key": "Authorization",
   "value": "CLAPP EA5t6EzbAl71vGbpREwxU...5cIeyuvwc1i2n7",
   "type": "text"
  }

You have an option to authorize actual organization users to interact with the profiles running in the Compute service.

Note Edifecs recommends that you create and use a dedicated application user account.

1. In Cloud Repository, share access to the project folder with the operational users you intend to add hen deploying a build.
2. In Edifecs Application Manager, for the XEserver profiles you want to run in the Compute service, for every XEngine component that references artifacts stored in the Cloud Repository, add the following parameter on the Processing Configuration tab of the component settings: XEngine.Settings.Authentication = {MD_REST_Header[Authrorization]}.
3. For requests to be authorized, add the bearer token to the request header.
   Click here to see how to get a bearer token

   Use the Postman tool to get a bearer token.

   1. In Postman, add a POST request.
   2. On the Authorization tab, in TYPE, select OAuth 2.0.
   3. In Add authorization data to, select Request Headers.
   4. Click Get new Access Token.
   5. In the GET NEW ACCESS TOKEN dialog, in Token Name, enter the following token name: auth.edifecsfedcloud.com.
   6. In Grant Type, select Password Credentials.
   7. In Access Token URL, enter the following URL: https://auth.edifecsfedcloud.com/auth/realms/main/protocol/openid-connect/token.
   8. In Username and Password, enter your login and password.
   9. In Client ID, enter the following client ID: orchestration-service-frontend.
   10. In Client Authentication, select Send as Basic Auth header.
   11. Click Request Token to fill in values into the Access Token field.

   

   12. Click Use Token. Your token will be automatically added to the request header.