Adding an Authentication Bypass

If there are particular web requests that should be excluded from authentication which can be identified by HTTP header then these can be excluded by creating authentication bypasses.

Any HTTP header can be defined for this purpose but it is expected that the user-agent header will be used most frequently.

To add a HTTP Header bypass:

1. From the Policy Center Home page, click Web Policy Routes. The Manage Policy Routes page appears.

2. Click the Authentication Bypass tab. The Authentication Bypass page displays a list of the authentication bypasses you have already established.

   For the Gateway to display the Authentication Bypass tab, you must enable user authentication. To do so, navigate to System Center Home > Proxy Settings > Authentication Settings. For more information on enabling user authentication, see About User Authentication.

3. Click New. The Add HTTP Header Bypass dialog appears.
4. In the Header field, type the name of the header that will be used to identify the HTTP requests where authentication should not be requested.

5. In the Value field, type a matching header value.

   The HTTP Header Bypass will be triggered if the Header field contains the substring that you specify in the Value field. Wildcard characters are not supported in the Value field. Both the Header and Value fields are not case-sensitive.

6. Click Add to save changes.

This feature is only available when Authentication is enabled. When you have finished modifying your content security policy you must apply the configuration for any changes to take effect. The Value field can be a sub-string of the full header value. This functionality should not be used for general authentication bypass. See About User Authentication for further information.