security.manager EE (deprecated)

The security.manager EE Generic URL Protection is a default functionality of security.manager EE that doesn’t require any additional installations. However, it shouldn’t be used if you want to protect more than one FME Flow URL or if you want to upload larger files to FME Flow.

Using the url protection of security.manager EE it is possible to use a technical FME Flow account to call FME Flow URLs.

Necessary steps:

  1. Log in to security.manager EE.

  2. Click Protected Services > Create.

    1. Use the FME Flow base url (without /fmeserver) as Service URL to protect.

    2. Choose the authentication method (sso for authenticated users in map.apps).

    3. Enter Username and Password for the HTTP basic authentication.

      This accounts needs access to all repositories that should be accessed in map.apps ETL.

  3. Create a policy set for this service.

    1. Define the necessary roles that should have access to this FME Flow.

    2. Specify FME sub URLs: fme*/**.

  4. Use the sso URL in your map.apps ETL.