Hello,
According to Microsoft's licensing policy, a Client Access License (CAL) is required for each user or device that accesses or uses the server software. This includes web-based applications that run on the server, such as your DMS. Therefore, you would need to purchase CALs for each user that will be accessing the DMS, regardless of whether they are using a web-based interface or not.
Using a single anonymous user and masking every user with a token is not a valid licensing option according to Microsoft's EULA. This would be considered a violation of the licensing policy and could result in legal consequences.
I would recommend consulting with a licensed reseller to determine the exact licensing requirements for your specific scenario. They can provide you with the most up-to-date information and help you ensure that you are in compliance with Microsoft's licensing policies.
Best Regards,
Hania Lian
============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.