RWS strongly recommends against disabling OAuth authentication, especially in a production environment. OAuth authentication is set up to work out of the box, so only disable it if you have a pressing reason to do so. OAuth authentication must be switched on everywhere, or switched off everywhere.
Procedure
- In the configuration location of every Content Delivery microservice, open the cd_ambient_conf.xml configuration file, for editing.
- In each file, in the
Security element, set OAuthEnabled to false, and ensure that the Rules element has an Enabled attribute set to false.
- Repeat until you have disabled OAuth and rules in all Content Delivery microservices.
- In the configuration location every Content Delivery Java/JSP client or API, open cd_client_conf.xml, the client configuration file, for editing.
- In each file, comment out the
TokenService element, then save and close cd_client_conf.xml.
- Repeat until you have commented out the Token Service element in all Content Delivery Java/JSP clients and APIs.
- In the configuration location of every Content Delivery .NET client or API, open Web.config, the web application definition file, for editing.
- In each file, find the
add element that has its key attribute set to oauth-enabled and set its value attribute to false. Then save and close Web.config.
- Repeat until you have commented out the Token Service element in all Content Delivery .NET clients and APIs.
- Restart the Discovery Service:
- If the Discovery Service runs as a Windows service from the Start menu, enter services.msc to open your Services screen, find the item called Tridion Discovery Service, right-click it and select Restart from the context menu.
- If the Discovery Service runs as a Java process, find the process (listed as Java (TM) Platform SE binary in Windows Task Manager) and restart it.
- Restart all other microservices, which are identifiable by the following Windows service names:
- Tridion Content Service
- Tridion Deployer Service
- Tridion Session Preview Service
- Tridion Session Content Service
- Tridion Context Service (deprecated)
- Tridion Contextual Image Delivery Service (deprecated)
- Restart all clients and APIs.