schirrms - 2025-08-20

Hi,

While migrating our iTop server, we need to change the authentification method for our Query Book for Excel.

Our context :
iTop 3.2.2-1 (yes ! Already :))
iTop external User
Authentification done trough the SAML extension
User creating their own personal token (also allowed in the configuration)

This whole part is working, and people can request the Rest/Json API with their Token (the token Have 'Export' and 'REST/Json' perimeter)

I did a lot of tests stating from this grat documentation (iTop Docs rocks ;)) :Reports in Sppreadsheet

But, no matter what, I got a message from the iTop server :

<html><head></head><body>login_mode 'token' forced without any token passed</body></html>

My report is quite big, 12 colums some with long texts, and 7375 lines.

Finally, instead of 'format=sreadsheet, I put format=csv, and the export is working, and much faster.

I also tried with a basic account, and in this case, the spreadsheet works (slowly).

I confirm that, in any case, the HTML way doesn't work (for me).

I also did an ugly test, and put the token in the URL (auth_token, in that case, not Auth-Token). This works.

Has anyone an idea to explain (ar to help me pinpoint) this behavior ?

Also, in the reference page, csv format is not recommended :
"csv only works with simple fields with single line data."

Can someone explain the risks ? I won't be able to export multiline cells in CSV ?

Thanks,

Pascal