Disable Basic Login option in browser

Kinetic ERP
1

Hi everyone,
We have an on-prem setup that I am in the process of upgrading from 10.2.500 to the latest 2022.2.200.
Everything has gone fine so far except I’ve come across an issue that no one seems to know a solution too and this seems very strange to me. Been going round and round with support on it and not getting anywhere.

How do I remove the basic login option from the login drop down on the browser version of kinetic? We will be going browser only when we upgrade and will retire the smart client. For this reason, I have configured Azure AD auth for our setup and that all works a treat. However, for various reasons our Epicor login page will be exposed to the internet, and I do not want basic login to be an option I want the only option to be Azure AD for very obvious security reasons.

Seems to me this is a glaring oversight that there is not an easy way to pick which authentication methods you want exposed on the browser version logon page. Is there something simple I’ve completely missed. Or do I need to edit some deep hidden config files or the web page itself (which I’m down to do if its what’s required, I cannot have an internet exposed login page to our ERP that has basic login as an option )

Thanks guys…

2

I had the same question. There are some helpful replies here.

3

Short answer, you can disable Basic Auth in this way:

INSERT INTO Ice.SysConfig
(
Key1,
Key2,
SysCharacter01
)
VALUES
(
‘AdvertiseAuthentication’,
‘Basic’,
‘false’
)

Answer provided by @bconner

6 Likes
4

Yep found that from your first reply and have done it, thank you so much, do not know why support could not provide this solution.

1 Like
5

Kieran, why allow basic auth on the app server config then?

Or did you change this classic client auth to something other than basic and you are still seeing the “basic” in the web form login?

image
image804×77 2.28 KB

@Kieran

6

That setting has no effect on the browser-based UI. Classic Client Authentication is set to Windows for us, but still needed to use the fix above to remove the illusion of choice in the browser login screen.

7

we are an older 10.2.500 on prem setup that used basic auth so all accounts are setup this way. I configured AzureAD and setup some users to log in that way and allowed it in the config and got that working but it looks like the new browser login page on 2022.2.200, includes basic auth option as default now? and when I tried it, it worked, to my horror!

But now it’s disabled it’s not an issue and we can carry on with the testing.

8

A: They probably didn’t know.
and
B: It requires direct database update.

1 Like
9

I see, the illusion is all those steps are needed for. You can still effectively disable basic auth at the app server level though…

1 Like
10

Hi andrew,

I am facing same issue but i tried your solution but still the browser showing the basic authentciation

11

Are you trying for version 2024.2? This solution has seemed to stop working after upgrading to 24.2.

1 Like
12

Nope our environment is 2022.6

1 Like