HTTP header

You can delegate user authentication to third-party systems (proxies/servers) using HTTP header authentication.

When this feature is activated, SonarQube Community Build expects that the authentication is handled prior to any query reaching the server. The tool that handles the authentication should:

• Intercept calls to the SonarQube Community Build.
• Take care of the authentication.
• Update the HTTP request header with the relevant SonarQube Community Build user information.
• Re-route the request to SonarQube Community Build with the appropriate header information.

All the parameters required to activate and configure this feature are available in SonarQube Community Build configuration file. See the SSO AUTHENTICATION section in <sonarqubeHome>/conf/sonar.properties.

Using HTTP header authentication is an easy way to integrate your SonarQube Community Build deployment with an in-house SSO implementation.