WebDAV Authentication and Authorization

WebDAV is a protocol that lets you upload and download data or code files. A merchant sends WebDAV requests to your instance’s WebDAV server. The merchant’s WebDAV client can be a Business Manager user or an API client for machine-to-machine interaction.

When the merchant's WebDAV client is a Business Manager user, such as Cyberduck, Salesforce B2C Commerce performs authentication using Basic Auth (username and password). You specify authorization rules in Business Manager by configuring per-folder rules in the Roles module (WebDAV Permissions tab).

When the merchant’s WebDAV client is an API client, B2C Commerce performs authentication using an authorization token minted by Account Manager. To get an authorization token, the API client presents its client-id and client-secret to Account Manager. You specify authorization rules in Business Manager by configuring per-folder rules in the WebDAV Client Permissions module.

X Privacy Update: We use cookies to make interactions with our websites and services easy and meaningful, to better understand how they are used. By continuing to use this site you are giving us your consent to do this. Privacy Policy.