Anonymous access to Connections Docs?

Hi

Does anyone know if it's possible to set up Anonymous access to Docs ?.

Reason for asking is :

We have set up some pages in XCC which allow Anonymous access, on that page we show several docs and short movie clips. The anonymous users can download the files, but when they click the files to view them online they are prompted for Connections login.

Another place where it would come in handy is when using Verse with the built in MFA solution. Here we have had to disable SSO between Connections and Webmail, otherwise users logged into Connections can bypass the MFA part of webmail, but means that when you want to preview a file in your Verse mail you will need to log into Connections in another tab before doing so, otherwise you will not be able to do the preview .....

Hi Anders,

I've been doing some testing, and I can't exactly reproduce the issue. When I click on a file in XCC as an anonymous user, I don't get prompted to authenticate. However, when the Docs Viewer loads it says that there's no preview available. When logged in, the preview of the file loads as expected. I tried different security role mappings in WebSphere, but continued to get the same results. I think this is probably working as designed, but suggest that you open a case with HCL Support if you'd like to look into it further.

Regarding the Verse question, I didn't test that, but I know that the Verse/Docs integration requires some additional configuration. I suggest opening a second Support case for that inquiry.

Please let me know if you have any questions.


Tony Dezanet
HCL Connections Support

Hi Tony

Thanks for taking your time to look into this. It's a bit strange that we don't get the exact same result when trying to open a document from XCC, but then again the end result is the same :-)

And I guess you are right that it works as designed, but it takes away some of the idea of being able to use Anonymous access in XCC, so I'll open a case with HCL support to hear if it's something that would be considered as being possible to change in a later release.

Regarding the Verse integration thing I know that there is some configuration to be done to get that to work. We did that a long time ago and it worked fine. But when we then started using the MFA function built into Verse we discovered that if a user had Connections open in a browser tab and then opened up Verse in a new tab, the SSO between Domino and Connections let the user open up Verse without logging in (as usual with SSO), but that somewhat broke the idea of MFA for Verse. If you have gotten hold of a set of credentials for Connections in this way you can bypass the MFA for verse. Hence we broke the SSO between the Domino servers and Connections to force MFA to be used. But as Verse uses Connections Docs for viewing files that broke at the same time, so if you try to preview a file you get an error, unless you have your Connections logged in in another tab....... and we have not been able to get a workaround for that....hence my idea that if Docs viewer could be opened anonymously then that problem would be solved as well :-))

Thanks for your interest in the matter.

Hi Anders,

For your awareness, there is an enhancement request for MFA functionality in Connections:
https://connections-ideas.hcltechsw.com/ideas/IDEACNCTNS-I-401

However, if I'm understanding you correctly, I'm not sure if the lack of MFA functionality in Connections is relevant. It seems to me that even if you're already logged into Connections, when you access Verse, you should still get an MFA prompt. I think this is definitely worthy of further investigation via an HCL Support Case.


Tony

Hi Tony

I would surely love to have built in MFA in Connections as well as we have in Verse, so I hope that suggestion will end up being implemented.

But yes you are right, we were also quite surprised finding out that the Verse MFA could be "tricked" by logging into Connections before opening Verse (when there is SSO set up between the two systems, which will often be the case if you use both products). I'll go ahead and create a support case on that part.

Anders

This is an interesting question. From license perspective, it is alloweed. For 2.0.2 https://www.hcltechsw.com/wps/wcm/connect/65cf8957-f95e-4147-9a89-0a212798dd37/HCL+Connections+Docs+2.0.2+License_English.pdf?MOD=AJPERES&CONVERT_TO=url&CACHEID=ROOTWORKSPACE-65cf8957-f95e-4147-9a89-0a212798dd37-oh2dUIR it says:

Technically, does Docs support anonymous operation such as saving updated documents into Connections?