Authentication options with Anaplan XL Web Edition

When configuring Anaplan XL Web Edition, you will need to decide on the type of authentication. Below is a summary of the options:

Anonymous authentication would be typically used where Anaplan XL Web needs to be available to everyone with no restrictions, such as on the Internet or available to an entire organization (with no restrictions) on an Intranet.

A user account needs to be specified, and all users will connect to the data source as this user. The database server can be on a different machine to the web server.

Basic Authentication would typically be used where it's not possible to configure Kerberos Delegation or if the set of users needs to be maintained locally on the machine (independent of the Active Directory/Domain users).

The client will be asked for a user-id and password. This'll be checked against local users (if no domain is specified) or the active directory users. The database will be accessed using the given account and can be located on a different server to the web server.

Most organizations use Windows Authentication, which is also called Integrated Authentication. This method is the most common because it controls authentication and access through the same ways as other network resources.

The client's current credentials will be passed to the server and will be used when connecting to the data source. If the database server is on a different server, then they'll only get the credentials if Kerberos Delegation has been configured. Kerberos will need to be set up and configured by a domain administrator. Most large organizations will have an existing process for doing this.

If the data source needs more information, you will have to enter it separately when the report is opened. This can be the case when, for example, the data source uses basic authentication.