Chat now with support
Chat with Support

NOTICE! We are upgrading our support telephone services, implementing Genesys, starting the week of May 19, 2025

Cloud Access Manager 8.1.1 - Security and Best Practice Guide

Choosing the best mapping strategy

An advantage to using folder-to-root mappings is that the Secure Sockets Layer (SSL) certificate that authenticates the public server can cover all web applications with a single hostname. Using folder-to-root mappings is less expensive than root-to-root mappings, this is because an SSL certificate that authenticates a single hostname is generally cheaper than one which protects multiple hostnames.
However, use of folder-to-root mappings is not recommended for complex web sites, particularly those which rely heavily on client-side scripting to generate dynamic content. When using the folder-to-root approach, the proxy must rewrite relative URLs embedded in the content body, and if an embedded URL is built dynamically by the application, the proxy may need special rules (filters) to rewrite it correctly.

Rewriting relative URLs using folder-to-root

Table 4.  
Private URL https://erp.acme.prod.local
Public URL https://www.acme.com/erp
/images/home.jp
/erp/images/home.jpg
../scripts/login.js
../erp/scripts/login.js
reports/salesfigures2014.pdf
erp/reports/salesfigures2014.pdf
this.href.location = '/register.aspx';
this.href.location = '/erp/register.aspx';

Relative URLs using root-to-root

Table 5.  
Private URL https://erp.acme.prod.local
Public URL https://erp.webapps.acme.com
/images/home.jpg
Does not need rewriting.
../scripts/login.js
Does not need rewriting.
reports/salesfigures2014.pdf
Does not need rewriting.
this.href.location = '/register.aspx';
Does not need rewriting.
 
* 
NOTE: As embedded relative URLs do not need rewriting when using the root-to-root approach there is less scope for URL rewrite problems, and the proxy can return the page to the browser more quickly. In general, we strongly recommended the root-to-root approach for both reliability and performance.

Choosing the right SSL certificate

We recommend that you purchase and install an Secure Sockets Layer (SSL) certificate from a Certificate Authority, this ensures Dell™ One Identity Cloud Access Manager users can be confident they are interacting with a genuine service. Please refer to the Dell™ One Identity Cloud Access Manager Installation Guide for full instructions on how to request and install an SSL certificate for Cloud Access Manager.
You can purchase one of three types of SSL certificate:
•
Single host certificate
•
Wildcard certificate
•
Subject Alternative Name (SAN) certificate
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating