Error authentication user in WCS about Human Tasks

Question

Hi All,
We developed a BPM workflow and 4 human task(HT) in ADF and using WCS for accessing the tasks of the human workflow.
We are working using the virtual machine soabpm-vm 11.1.1.6 ps5, downloaded by the Oracle Web Site.
I created a space in WCS, based on the BPM-Workspace templace present in the WCS.
I was able to execute the process and the HT without any problem.
I am adding security to all the 4 HT following the indication about ADF security, using the ADF wizard in jdeveloper.(see Oracle WebCenter 11g Handbook chapter 18, page 421)
After implementing the following choices:
1)ADF Authentication and Authorization
2)HTTP Client Authentication
3)No Automatict Grants
4)Either for WebPAge, Either for taskflow i have enabled the view privileges for viewing the page or executing the task flow.
5) I linked the valid-users with a groups in my realm(AdmiServer)
I tested all the security implemented with BPM worspace application (https://hostname:7002/bpm/workspace)  and it is working correctly.
If i test it within webCenterSpace the HT are not working. When i click on the HT i got the following error:
Error 401  Unauthorized
The request requires user authentication. The response MUST include a WWW-Authenticate header field (section 14.46) containing a challenge applicable to the requested resource. The client MAY repeat the request with a suitable Authorization header field (section 14.8). If the request already included Authorization credentials, then the 401 response indicates that authorization has been refused for those credentials. If the 401 response contains the same challenge as the prior response, and the user agent has already attempted authentication at least once, then the user SHOULD be presented the entity that was given in the response, since that entity MAY include relevant diagnostic information. HTTP access authentication is explained in section 11.
This is what is happening:
I  logged in into WebCenterSpace with the user credentials (Username pwd). I am correctly authorized and identified.
I later click on the HT and the user is not propagate as the logs say that anonymous user try to access to the HT.
Why there is this different behavior between WCS and BPM worspace application?
Can i have same indication about what to do in order to get the HT working in the WCS?
Regards Piero

Answer 1

Hi Praveen,
To fix this issue, you need to change the Identity of your website's Application Pool to use the
NetworkService account (or the less secure LocalSystem account).  By default, IIS7 seems to set the Application Pools Identity to 'ApplicationPoolIdentity' instead of NetworkService or LocalSystem.
Here's a step-by-step guide for determining your websites Application Pool, then changing its Process Model Idenitty in IIS7:
1.Open Internet Information Services (IIS) Manger.
2.In the Connections sidebar, drill down into Default Web Site and click on your website.
3.Now in the Actions sidebar (on right side), click on Advance Settings... In the popup box, under General you will see your Application Pool listed for your website (in my case the app pool is: ASP.NET V4.0).
4.Click Cancel...  If you choose, you can change the Application Pool here, but for the sake of this example we just wanted to find out what the website's App Pool was.
Then change the app pool's (Process Model) Identity to 'NetworkService', the steps are showed as below:
1.Open Internet Information Services (IIS) Manger.
2.In the Connections sidebar, click on Application Pools.
3.Now right-click on theApplication Pool that your website is using (in this case my site is using the ASP.NET v4.0 application pool), and select Advanced Settings... from the menu.
4.In the Advanced Settings pop-up box, locate the Process Model -> Identity section and click on the Application Pool Identity.
5.In the Application Pool Identity pop-up box, change the Built-in account to NetworkService (or if you want LocalSystem), then click OK, and click OK again to save your Advanced Settings changes.
Hope this helps.
Best Regards,
Peja
Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.