Login to CS / OTDS without providing password in SSO environment

Thanks, I will have to experiment with both methods.

My use case was running REST API calls from .html apps. I use WebReports wherever I can with the [LL_REPTAG_OTCSTICKET QUOTE /] call in the AJAX, but one of the problems was that is that web reports isn't very relative URL path friendly.

If the relative path in for a .js lib is for example:

 <script type="text/javascript" src="js/EcmaJSAPI.js"></script>

In a Web Report, unless I add it to the /img (Support Directory) on the server or Support Assets Volume and adjust the path, or I have to translate it into a fetch to use it locally:

 <script type="text/javascript" src="/otcs-sso/llisapi.dll?func=doc.Fetch&nodeid=123456"></script>

The other big problem with .html is that you don't have access to the WR tags (e.g. "[LL_REPTAG_OTCSTICKET QUOTE /]),[LL_REPTAG_USERID /] etc. )

As the apps get more involved/complicated and add more .js and css resources and third party libs, it is easier to use .html. So currently for SSO authentication I use a PROXY WR to launch the .html app and add the WR parameters that I need. I don't want to embed USERNAME/PW's via JS.

For example, this small 3 line WR snippet, gets the USERINFO, TimeStamp INFO and the OTCSTICKET and sends them as parameters to the .html where I can use them for populating fields and for the AJAX GET and POST calls:

*************** START OF WR ***************

[LL_WEBREPORT_EXCLUDEHTML /]

<script>

let mTicket = encodeURIComponent([LL_REPTAG_OTCSTICKET QUOTE /])

let mURL = 'https://myCSserver/otcs-sso/llisapi.dll/fetch/5405556/-/form.html?nodeid=5402812&vernum=-2&clTicket=' + mTicket + '&clUserName=[LL_REPTAG_USERID USERINFO:FIRSTNAME /] [LL_REPTAG_USERID USERINFO:LASTNAME /]&clDateTime=[LL_REPTAG_DATETIME DATE:"%Y/%m/%d:%H:%M:0" /]&clUserID=[LL_REPTAG_USERID /]'

window.open(mURL,"_self")  

</script>

************** END OF WR ******************

on the JS/AJAX side we have:

let mTicket = "";

let mUserID = "";

let mUserName = "";

let mDateTime = "";

const queryString = window.location.search;

  const urlParams = new URLSearchParams(queryString);

  mUserID = urlParams.get('clUserID');

  mTicket = urlParams.get('clTicket');..

mUserName = urlParams.get('clUserName');

  mDateTime = urlParams.get('clDateTime');

....

and the authentication within the AJAX call:

beforeSend: function(xhr) { xhr.setRequestHeader('OTCSTicket', mTicket); },

Because the documentation and examples are so lean from OT or within the forums, it's trial and error unless you get lucky with a answer from one of the forum participants.

Thanks again,

Ed