Manuel Herias Gomez (HERIM)
Principal System Architect
Pegasystems Inc.
HERIM Member since 2010 8 posts
Posted: January 24, 2017
Last activity: February 22, 2017
Posted: 24 Jan 2017 8:40 EST
Last activity: 22 Feb 2017 5:48 EST

Mashup URL obfuscation without PRGateway

Hi All,

In my customer, we are using Mashup with no gateway and Pega 7.2.1. After sniffing the traffic between a third party application we have to integrate with for authentication purposes, I can see that the headers are in clear text and that is something we want to avoid (STANDARD?pyActivity=%40baseclass.doUIAction&action=display&harnessName=XXX&className=XXY...).

I was checking the URL obfuscation and enncryption but I am having some troubles in having that work. I have added to prconfig the following entries :

<env name="initialization/SubmitObfuscatedURL" value="required" />
<env name="initialization/URLEncryption" value="true" />

But it has not worked as expected, in fact it does not work. Is it mandatory to have the PRGateway in order to have this working? Does anyone know how to achieve it?

Many thanks!

Data Integration Security
Moderation Team has archived post, This thread is closed to future replies. Content and links will no longer be updated. If you have the same/similar Question, please write a new Question.