Skip to main content
atoti.SecurityConfig(
    *,
    basic_authentication: BasicAuthenticationConfig = BasicAuthenticationConfig(),
    client_certificate: ClientCertificateConfig | None = None,
    cors: CorsConfig | None = None,
    https: HttpsConfig | None = None,
    jwt: JwtConfig = JwtConfig(),
    login: LoginConfig | None = None,
    same_site: Literal[‘lax’, ‘none’, ‘strict’] = 'lax',
    main_sso: KerberosConfig | LdapConfig | OidcConfig | None = None,
    sso: KerberosConfig | LdapConfig | OidcConfig | None = None,
    xmla_sso: KerberosConfig | None = None,
)
The security config.
Not available in the community edition: upgrade to use it.
This configures the parts of the security system that cannot be changed once the session is started.
See also: atoti.Session.security and atoti.tables.Tables.restrictions to continue configuring the security once the session is started.

​
Attributes

​
basic_authentication

Always enabled even if main_sso is not None to facilitate the authentication of service/technical users.
See also: BasicAuthenticationSecurity.

​
client_certificate

ClientCertificateConfig | None

​
cors

CorsConfig | None

​
https

HttpsConfig | None

​
jwt

JwtConfig

​
login

LoginConfig | None

​
same_site

The value to use for the SameSite attribute of the HTTP cookie sent by the session. See https://web.dev/samesite-cookies-explained for more information.
"none" requires the session to be served over HTTPS.

​
main_sso

The config to delegate authentication to a Single Sign-On provider.
See also: xmla_sso
Added in version 6.2.3.

​
sso

The config to delegate authentication to a Single Sign-On provider.
Deprecated since version 6.2.3: Use main_sso instead:

​
xmla_sso

The config to secure the /xmla endpoint with a different provider than main_sso. Excel’s Analysis Services connector only supports Windows (Kerberos) and Basic authentication. A session whose main_sso is an OidcConfig can therefore not be queried from Excel with the credentials of its identity provider. Setting this attribute secures /xmla with Kerberos while every other endpoint keeps using main_sso. Its type must differ from the one of main_sso.
Added in version 6.2.3.