Skip to main content

Securing MarkLogic Server

Certificate CN Field Value as MarkLogic Server Security Database Internal User

Follow these steps to configure Certificate-Based User Authentication for the user (demoUser1) as a MarkLogic Server internal user:

  1. Create the user demoUser1 with the necessary roles in the MarkLogic Server Security database (Internal User).

  2. On the AppServer page, set the authentication schema to “Certificate” with Internal Security to set to “true”. Unless you want to have some users authenticated as an external user as well, leave external security object to “none”.

  3. The app server will also select the CA that will be used to sign Client/User Certificate as accepted Certificate Authorities (See section CA Certificate earlier for example).

Once configured, accessing the app server with a browser the has the User Certificate (demoUser1) installed will be able to log into MarkLogic Server with the internal demoUser1.

Note

You will also need to assign the necessary roles to the internal user to be able to access resources as needed.