nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

Customizing SecurityConfiguration

jonnyg

We have implemented our SecurityConfiguration bean to use Spring's siteminder AuthenticationProvider, <B>PreAuthenticatedAuthenticationProvider</b>.

We'd like to have a config setting whether to use ours or use Activiti Enterprise's com.activiti.conf;SecurityConfiguration class… I guess, to do that, within our SecurityConfiguration, should we just call the class directly if needed?

Find more posts tagged with

Comments

trademak

Starting from Activiti 1.4.0 we provide override capabilities in the SecurityConfiguration class by implementing specific interfaces. Are you using 1.4.0 or an earlier version? We have done a small test using the Spring Security Siteminder functionality and we could plug that in the existing SecurityConfiguration by implementing the override interfaces.

Best regards,

jonnyg

Yes we are using 1.4.0. Yes we were planning on a custom bean to override.
What we are looking to do follow the way that com.activiti.conf.SecurityConfiguration class checks the property ldap.authentication.enabled – check for a config variable and use either Siteminder, or fallback to the standard config approach (LDAP, fallback to DB)

jonnyg

We did this get working, thanks to your help.
Our option for conditionally enabling is to use the @Profile annotation on the Java configuration files.

One other thing we learned - our Siteminder policy exempts JS/CSS/images and other non-data files, so these aren't checked by the policy server, and the smuser header is not passed onto those requests. So we need to tweak the config to exempt these file patterns.

jbarrez

That's awesome to hear!
@JonnyG: that image/css thing sounds like something I heard before. I think it's indeed a change in the patterns that need work.