Skip to main content

Security Configurations

Security configurations in Connxio are reusable blocks of information that contain credentials and other necessary details for securely connecting to various systems. These configurations help streamline the setup process and ensure the secure transmission of data between Connxio and external systems. Connxio stores all sensitive information securely in a secure key storage, ensuring the confidentiality of passwords and credentials.

Purpose of Security Configurations

Security configurations serve the following purposes in Connxio:

  • Secure Connections: Security configurations store sensitive information, such as credentials or API keys, required to establish secure connections with external systems.
  • Reusability: By creating reusable security configurations, users can easily apply the same set of credentials across multiple integrations, saving time and effort in configuration management.
  • Centralized Management: Storing security information in one place allows for centralized management and ensures consistency in connection details.
  • Enhanced Security: By keeping passwords and sensitive information separate from integration configurations, Connxio minimizes the risk of exposing confidential data.

Creating a Security Configuration

security configsecurity config

Navigate to "Security Configurations" in the right hand menu and click "Add new configuration".

Your are then greeted by a Security Type menu where you will choose what kind of configuration you want to create. The possible options are:

  • HTTP: Used for HTTP/REST adapters, data collection and webhook logging
  • Archeo: Credentials for Archeo logging
  • SFTP: Credentials for SFTP adapters
  • FTP: Credentials for FTP adapters
  • Connection String: Used for Azure Storage, Service Bus and Event Grid adapters
  • Email: Credentials for Email.

When a security type has been chosen, you can decide whether the security configuration should be global or not. If the global toggle is on, the security configuration will be the same across all subscriptions under the same company:

security configsecurity config

If global is set to off, you'll set different values for each subscription:

security configsecurity config

HTTP

When selecting HTTP, you'll first encounter these fields:

security configsecurity config
  • Name: The name that pops up when you select the configuration on an integration.
  • Headers: Add headers here as necessary to either authenticate the request or add other needed parameters.
  • Authorization Header Type: Select the protocol used by your endpoint. Choose between None, OAuth2(Bearer) and Basic.

Choosing your authentication scheme

We supply these authentication schemes in Connxio:

OAuth 2.0

Oauth is an established standard for authentication between systems. We won't be going into detail on how to manage and use Oauth 2.0 here as this is an advanced security topic. To configure the Oauth parameters you enter information as described below:

security configsecurity config

Please refer to the Oauth 2.0 standard for more information about the fields.

Basic

This is regular basic auth. Add username and password without encoding, we will encode before sending the request.

security configsecurity config

Archeo

Archeo holds one field, besides the config's name property:

security configsecurity config
  • Name: The name that pops up when you select the configuration on an integration.
  • Archeo API Key: The Archeo API Key provided from Archeo, used when logging to Archeo.

SFTP

The SFTP configuration contains all the relevant properties for connection to the SFTP server. The path to which folder to connect to is set in the configuration of the adapter.

security configsecurity config
  • Name: The name that pops up when you select the configuration on an integration.
  • Connection URL: The url to the SFTP server. The url support port number of suffixed with a colon, ie: sftp-server.net:1337
  • Username: The username Connxio uses to authenticate to server.
  • Password: The password Connxio uses to authenticate to server.
  • SSH HostKey Fingerprint: The fingerprint of the server certificate. Read more in the WinScp documentation.

FTP

The FTP configuration contains all the relevant properties for connection to the SFTP server. The path to which folder to connect to is set in the configuration of the adapter.

security configsecurity config
  • Name: The name that pops up when you select the configuration on an integration.
  • Connection URL: The url to the FTP server. The url support port number of suffixed with a colon, ie: ftp-server.net:1337.
  • Username: The username Connxio uses to authenticate to server.
  • Password: The password Connxio uses to authenticate to server.

Connection String

The Connection String Security Config is used wherever a Connection String is to be used. This could be a Azure Storage adapter, ServiceBus adapter or a Event Grid adapter.

security configsecurity config
  • Name: The name that pops up when you select the configuration on an integration.
  • Connection String: The connection string for the relevant resource.

Email

When selecting email, these are the fields to be filled in:

security configsecurity config
  • Email Address: The email address.
  • Username: The email username.
  • Password: The email account password.
  • Host: The server that hosts the email account.
  • Host Type: The type of protocol used on the server.
  • Port: The port for connecting to the server. IMAP typically uses port 993 over SSL.
  • Use SSL: Most hosts require SSL. Turn this on to make Connxio contact the host with SSL enabled.