External Authentication using OIDC/SAML ?

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

jeans

Looking at the documentation, external authentication support seems limited.

cf. https://support.hyland.com/r/Alfresco/Alfresco-Content-Services/23.4/Alfresco-Content-Services/Administer/Manage-Security/Authentication-and-sync/Configure-authentication-subsystems/Configure-external-authentication/External-authentication-and-SSO

AFAIU, only the CAS protocol is supported.

In our organization we have a central Identity Provider that offers OIDC and SAML protocol.
Is it possible to configure ACS to authenticate using one of these protocols?

If not, is it on a roadmap somewhere?

It seems though that SAML is used with an internal Keycloak that, apparently MUST be based on a LDAP backend. AFAICS, it enables an SSO between Alfresco internal components, so that you login once and can access ACS, AS and more.

It's hard to understand what would be the general architecture when using an external authentication, without LDAP. How do the different Alfresco components work with the supported CAS external authentication ?