topic Re: Setup User / Group Management using SSO into External system in Alfresco Archive

Setup User / Group Management using SSO into External system

hardik_thakkar1 — Mon, 09 Jun 2014 08:14:53 GMT

Hello there,We have decided to use Activiti as BPM in our new project. We would like to setup user and group management to external system which is SSO engine of our organisation. We have decided to use below approach-- We would be using activiti-rest to interact with Activiti engine and decided to

Re: Setup User / Group Management using SSO into External system

hardik_thakkar1 — Mon, 09 Jun 2014 08:54:23 GMT

Thanks Ben for your response.

I think this solution should work for authenticating user to interact with activiti-rest.

What about to manage users and groups in external system (In our case, SSO Engine) instead of managing them in Activiti DB.

Re: Setup User / Group Management using SSO into External system

b_schnarr — Mon, 09 Jun 2014 09:43:10 GMT

We solved this by using a LDAP-directory.

Re: Setup User / Group Management using SSO into External system

hardik_thakkar1 — Tue, 10 Jun 2014 08:34:37 GMT

LDAP would not work in our case as we have separate application for managing users and groups instead LDAP directory.

I read somewhere that we need to write custom Identity Services if we would like to manage users and groups in external system. Is this correct? If yes, is there any example of it how to customize identity services?

Any help much appreciated.

Re: Setup User / Group Management using SSO into External system

martin_grofcik — Wed, 11 Jun 2014 08:16:52 GMT

Hi Hardik,

You are right:
http://forums.activiti.org/content/override-default-identity-session-implementation

Regards
Martin

Re: Setup User / Group Management using SSO into External system

hardik_thakkar1 — Tue, 08 Jul 2014 05:31:59 GMT

Thanks a lot for your replies.

So that is clear to me that I have to customize UserEntityManeger and GroupEntityManager. But how to configure them in activiti-config.xml so my customized classes will be used by default instead of existing classes.

Please revert.

Re: Setup User / Group Management using SSO into External system

martin_grofcik — Wed, 09 Jul 2014 04:46:07 GMT

Hi Hardik.
If you want to change User/GroupEntityManagers you have to set them in org.activiti.engine.impl.cfg.ProcessEngineConfigurationImpl#sessionFactories

Regards
Martin

Re: Setup User / Group Management using SSO into External system

b_schnarr — Wed, 30 Sep 2015 12:58:32 GMT

Hi,

maybe this post helps you : http://forums.activiti.org/content/authentication-alternatives-rest-webapp

Best regards
Ben