Creating a Secure View

You can use the HTTPS protocol to define a secure view for your Siebel application. If a view is marked as secure, then the Siebel Web Engine verifies that the current request uses the HTTPS protocol, thereby preventing a user from entering HTTP into the browser to access a secure view instead of entering HTTPS.

Note: Oracle always recommends using HTTPS for security of the user interface and, when you use Siebel CRM with iframes, to use the same type for both applications: either HTTP or HTTPS. Browsers often require this configuration by default.

To create a secure view

1. In Siebel Tools, click View in the Object Explorer.

2. In the Views list, locate the view you must modify.

3. Set the Secure property to TRUE.

   For the Siebel client, the Siebel Web Engine specifies the HTTPS protocol when it creates URLs to the view.

The implementation of the HTTPS protocol is external to the Siebel Web Engine. The browser and the Siebel Application Interface negotiate the HTTPS. The Siebel Web Engine only specifies that HTTPS must be used for a specific view. HTTPS must be allowed on any server that provides a secure view.