Overview Editor for adfmf-application.xml - Security Page

Application Navigator context menu for adfmf-application.xmlthen choose Openthen chooseSecurity

Use to designate whether ADF Mobile presents users with the default login page or a custom login page for application features that require authentication against either a remote login server, or against credentials stored locally on the device. Any application feature designated with Remote or Local user credential requirements in adfmf-feature.xml uses a login page. More

Default
Select to use the default login page that ships with ADF Mobile for all the selected application features.

Custom
Select to use a custom login page for all of the selected application features.

Content
If you use a custom login page, select the format for the page (HTML Page), and then browse to, and retrieve, the HTML page used for the login page. Alternatively, click Add to create the file. The file must be located within an Application Controller project. More

Application Login Sever
Choose the name of the application login server or click Add to create a new connection using the ADF Mobile Login Connection dialog. How?

Features with Security Enabled
Click Add to insert an application that requires authentication. These application features have been designated with either remote or local user credential requirements in adfmf-feature.xml (that is, the <adfmf:feature> element includes a credentials attribute).

Remote URL Whitelist
Click Add and then enter the domains that can be called from the within the web view of the application feature. These domains can include a wildcard (*). For example, *.example.com is a valid domain entry as is *.example.*. You cannot enter a fully qualified path. More

Entering only the wildcard allows the web view to request all domains and can pose a security risk; adding all domains to the whitelist not only enables all of them to open within the web view, but also enables all of them to access the device (whether or not it is intended for them to do so).


Mobile Developer's Guide for ADF, "ADF Mobile Application Security"