With the introduction of the Microgateway 4.0 the communication between IAM and Microgateway 4.X is migrated from a proprietary protocol based on Env Cookies and CAPI (Control API) to HTTP Headers.
The following table gives an overview of the features that are currently supported by different versions of Gateway and Microgateway:
Feature | Gateway | Microgateway 3.X | Microgateway 4.0 |
|---|---|---|---|
Client IP | .theme/1.3/en-us.16709.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | .theme/1.3/en-us.16710.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | .theme/1.3/en-us.16711.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} |
URL (as seen by the client) | .theme/1.3/en-us.16712.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | .theme/1.3/en-us.16713.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | .theme/1.3/en-us.16714.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} |
TLS Client Cert information | .theme/1.3/en-us.16715.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | .theme/1.3/en-us.16716.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | .theme/1.3/en-us.16717.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} |
Request ID | .theme/1.3/en-us.16718.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | .theme/1.3/en-us.16719.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | .theme/1.3/en-us.16720.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} |
Session ID | .theme/1.3/en-us.16721.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | .theme/1.3/en-us.16722.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | |
Cookie handling
| .theme/1.3/en-us.16723.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | .theme/1.3/en-us.16724.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | |
Session management
| .theme/1.3/en-us.16725.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | .theme/1.3/en-us.16726.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | |
Roles and roles expiration
| .theme/1.3/en-us.16727.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | .theme/1.3/en-us.16728.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | |
Identity propagation | .theme/1.3/en-us.16729.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | .theme/1.3/en-us.16730.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | |
Mapping templates with IAM specific security settings | .theme/1.3/en-us.16731.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | .theme/1.3/en-us.16732.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | |
Helm chart with IAM specific security settings | .theme/1.3/en-us.16733.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | ||
CSRF protection | .theme/1.3/en-us.16734.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | .theme/1.3/en-us.16735.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | .theme/1.3/en-us.16736.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} |
OpenAPI specification enforcement | .theme/1.3/en-us.16737.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | .theme/1.3/en-us.16738.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | |
API Policy and rate limiting | .theme/1.3/en-us.16739.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} | .theme/1.3/en-us.16740.Icon_-_Tick_(GW_gr_c3_bcn)_original.svg){kind=icon} |