How to configure anonymous authentication in Spotfire

Product:TIBCO Spotfire Server
Versions:7.5 and higher

Summary:
This article provides guidance on configuring anonymous authentication in Spotfire, and also describes some issues that may occur.

Details:
Anonymous authentication allows anyone to access public information that is available for viewing on the Spotfire web client without prompting them for a user name or password. When configured, there are some things to check if you run into issues.

Resolution:
1). Configure anonymous authentication following the Configuring anonymous authentication instructions in the manual. Afterwards, export the latest Spotfire server configuration.xml. Check that it has the following: 

<anonymous-auth>
      <enabled>true</enabled>
    </anonymous-auth>

2). After you have enabled the guest account, do a user search in the Administration Manager to make sure the user is present: 
  guest@anonymous 

To enabled (depend on domain name style), you need use a command such as:
  config enable-user --username=guest@ANONYMOUS

3). If you see an ERROR like the following:

DEBUG 2017-02-01T15:44:46,205-0500 [guest@ANONYMOUS, #14789, #78451] server.security.SecurityFilter: The client is successfully authenticated
DEBUG 2017-02-01T15:44:46,236-0500 [guest@ANONYMOUS, #14789, #78452] server.security.SecurityFilter: Filtering request: HTTP GET /wp/OpenAnalysis on port 80 from 11.243.0.155 at port number 59611
ERROR 2017-02-01T15:44:46,268-0500 [guest@ANONYMOUS, #14789, #78452] method.annotation.ExceptionHandlerExceptionResolver: Failed to invoke @ExceptionHandler method: public void com.spotfire.server.wp.controller.WebPlayerExceptionController.rethrow(com.spotfire.server.security.UnauthenticatedException) throws com.spotfire.server.security.UnauthenticatedException
com.spotfire.server.security.UnauthenticatedException
    at com.spotfire.server.wp.controller.ViewAnalysisController.openAnalysis(ViewAnalysisController.java:245)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
    ...

make sure that the users/group: "Everyone", "Anonymous User" and "guest@ANONYMOUS" has browse+access rights to the folder with the analysis (info link and data source if used) and also the root folder (Library) and any folder in-between. The user must have access to all folders in the hierarchy.

Make sure that the pre-existing "Anonymous User" group has the same Licenses as the "Everyone" group.