The eDelivery specifications do not require restricting access to metadata hosted on SMPs. By default, all metadata is accessible without restrictions.
Starting from DomiSMP version 5.0, users can manage access by setting the visibility flag for each resource:
- Private: Only authenticated and authorised users can access the resource.
- Public: The resource is accessible to all users.
Additionally, access to DomiSMP metadata can be secured using HTTPS/Basic Authentication with access tokens and mutual TLS authentication. Note: Authentication must also be supported on the Access Point side.
For more information, refer to Domain, Group and Resources.