nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

Generating an Alfresco Ticket on Behalf of another User?

praj

Hi,

Is it possible through a combination of external (or appropriate) authentication using a proxyUserName to generate an Alfresco ticket on behalf of another user?

E.g. proxy user logs in, runs the webscript:
POST /alfresco/s/api/login

And generates a ticket for the target user which can then be used by the target user for authentication purposes?

Thanks

Praj

Find more posts tagged with

Comments

mitpatoliya

No, I do not think so.
And also logically it makes system insecure.
So, I do not think this feature will ever be there in any of the system.

mrogers

If you are using external authentication then you can pass in whatever token you want. Alfresco will simply trust whatever your external authentication system says.

praj

If you are using external authentication then you can pass in whatever token you want. Alfresco will simply trust whatever your external authentication system says.

Thanks for the advice. I've been through the external authentication documentation covered here:
http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems#External

My question relates to setting up same-signon between another system and Alfresco without the use of a 3rd party authentication system (LDAP, CAS, etc). From what I understand of the external authentication functionality, it requires the REMOTE_USER CGI variable to be set to enable pass-thru authentication into Share (looking specifically at same-signon into Share). Would there be a way to do this without doing it at the apache level? E.g. within a PHP script? Any suggestions?

mrogers

Any suggestions?

Why are you doing this? It seems a bit strange.

rdanner

Hi,

Is it possible through a combination of external (or appropriate) authentication using a proxyUserName to generate an Alfresco ticket on behalf of another user?

E.g. proxy user logs in, runs the webscript:
POST /alfresco/s/api/login

And generates a ticket for the target user which can then be used by the target user for authentication purposes?

Thanks

Praj

Are you thinking that your third party authentication would have to log in as a super user and then generate ticket for the user it's authenticating?

You should not have to do this. Take a look at the out of the box subsystems for supporting CAS. Another example is the CROWD plugin by AppFusion.

abarisone

Hi all,
we have a scenario where having Alfresco external authentication coming from a portal (trought CAS), we would need that a Call Center user could "impersonate" another user in order to carry out operations on behalf of another user.
We obtain a TGT for the CC user, but it is there an out-of-the-box function or procedure in order to achieve this impersonation?

Thanks,
Andrea