How to disable anonymous on Apache Nifi 1.25

[#1]

We have been using nifi with anonymous enabled with initial development.

Now the requirement is to disable anonymous and have user based authorization / authentication.

To start with, we want to disable anonymous and have single-user-authorizer.

Manage to create Administrator user with the set user script. Able to login with Administrator. But the anonymous is still enabled. Code created user Administrator is still visible with anonymous user.

Update nifi.properties with false flag as shared below. But still we are able to access without credentails.

nifi.security.user.authorizer=single-user-authorizer
nifi.security.allow.anonymous.authentication=false
nifi.security.user.login.identity.provider=single-user-provider
nifi.security.user.jws.key.rotation.period=PT1H
nifi.security.ocsp.responder.url=
nifi.security.ocsp.responder.certificate=

[#2]

@itninja 

Did you configure your NiFi to use HTTPS or is still configured for HTTP?
In order for NiFi to support user authentication and authorization it must be secured over HTTPS.

Could you share some screenshots so I better understand what you mean by:

Manage to create Administrator user with the set user script. Able to login with Administrator. But the anonymous is still enabled. Code created user Administrator is still visible with anonymous user.

Please help our community thrive. If you found any of the suggestions/solutions provided helped you with solving your issue or answering your question, please take a moment to login and click "Accept as Solution" on one or more of them that helped.

Thank you,
Matt