Web Embed - anonymous authentication

Use case: I have an application built on the Constellation Design system, and I want to create an embed and host it on a client website that does not require authentication.

Is there a possibility to enable anonymous authentication in Pega Constellation-based Web Embed in Pega Infinity 24.2? How can I achieve it? and what are the other options?

Thanks

@Arunkum@r

Please refer this article for various ways of authenticating in web embed -

https://docs.pega.com/bundle/platform/page/platform/user-experience/authentication-web-embed.html

@Aditi Mehta Yes, I came across this article, but as I explained, i am not sure how to approach it. Did you use anonymous authentication in a constellation-based web embed? I also see in a few places that it mentions anonymous authentication is not supported in constellation-based apps.

@Arunkum@r Anonymous authentication is no longer supported in constellation . However , we can achieve the same use case where an unauthenticated user can login or register using a web-embed .Please follow the steps below :

i. Create a User registration case type with two stages create ( Shows the new user registration form) and Resolve (to perform other activities ex. create operator , Send notification etc.).

ii. Create a Web-embed with Create a case “action type” - refer Registration case type . You can use Authorization grant flow with Pega as the auth service. Please note , A custom bearer grant type should be used for a production environment .

iii. Create a guest access role with minimal access . Access to Registration case creation should be enough.

Create an operator with Guest user access group and use the same credential in web-embed authentication.

Hope this helps!

Thanks

@duttr Thanks for the response. As a user, I don’t want to register to perform the process. For example, as a customer of the bank, I want to run the mortgage calculator to check my eligibility and view available products. I don’t want to register for that. Previously, we could use anonymous authentication to achieve this in traditional application design. How can we overcome this in constellation-based web embeds?

@Arunkum@r Earlier we used the action type “Show-Harness” in web-embed for such scenarios in aTheme-cosmos application. However, Constellation is view-based and displaying a custom-harness in web-embed is not supported.

Display a page “action type” is supported in Web-embed where we can show a landing page but Landing pages so far only supports table templates. If you think creating a case is not necessary for your use case, please explore “Display a page” action type and show a landing page with custom widget.

Thanks,

Rima

@duttr In my use case, I need to capture the customer’s personal details, loan details, employment details, financial details, outgoing details, and summary. (screenflow) Finally, the decision results are sent via email. Therefore, we need to create a case to capture these details.

@duttr How to achieve this in a constellation-based web embed without customer registration or authentication? Earlier, we could use anonymous authentication in a traditional app.

@Arunkum@r

Yes, the Anonymous Authentication Service is not yet supported for Constellation applications.

At the bottom of the earlier mentioned doc link (Authentication in Web Embeds) you will see a section about “Anonymous Authentication” workarounds. Those two suggested approaches–customBearer grantType and the authCode grantType using a WebLDAP Custom authentication service with a properly configured designated “anonymous” operator. Please keep in mind the caveats mentioned within the doc page as well.

@Arunkum@r Yes . Creating a case type would be ideal for your use case.

Thanks,

Rima

@Arunkum@r I have suggested the authentication approach in my first reply in step 2 and 3.

@duttr

My use case is quite straightforward: I would like to run a case type in a mashup without requiring customer authentication or registration. In our traditional application, we achieved this using Anonymous authentication.

Could you please advise on how to accomplish this in Constellation? I would appreciate it if you could provide the available options.

It looks like Constellation does not support Anonymous Authentication. Does anyone have an alternate approach to solve this?