topic Re: Multi-tenancy and SSO (CAS+LDAP) in Alfresco Archive

Multi-tenancy and SSO (CAS+LDAP)

danilo_barone — Fri, 10 Oct 2008 07:35:29 GMT

Good morning all,I have some questions, so I'm going to describe my situation:In multi-tenancy structure, I have fore example 2 tenants.-tenantdom1-tenantdom2So an user can login in alfresco by <username>@tenantdom1 or <username>@tenantdom2 (depending on wich tenant he is registered).I c

Re: Multi-tenancy and SSO (CAS+LDAP)

danilo_barone — Fri, 10 Oct 2008 10:40:09 GMT

I thought I can use the "ldap.synchronisation.personQuery" to find all tenant's users.
For Example:


ldap.synchronisation.personQuery=(&(objectclass=inetOrgPerson)(|(o=tenantdom1)(o=tenantdom2)))
‍‍‍

Is this correct?

Regards
Danilo

Re: Multi-tenancy and SSO (CAS+LDAP)

danilo_barone — Fri, 10 Oct 2008 11:21:59 GMT

other problem…
the organization unit "o" is not an attribute, so i can't insert it in the query… but I can start query on a "father-node" of all o=tenantdom1, o=tenantdom2…etc
we just need to insert an attribute to separate users that can access to Alfresco and any user that are in LDAP but cannot access to Alfresco.

What do you think?

Regards
Danilo
(I'm doing ping pong with myself… )

Re: Multi-tenancy and SSO (CAS+LDAP)

danilo_barone — Mon, 13 Oct 2008 14:04:43 GMT

I'm continuing to test multi-tenancy importing from ldap, but… :cry: I have many problems to understand this structure.
If I create an user of tenant1 (test@tenantdom1) in LDAP, simply by entering the username 'test@tenantdom1', Alfresco look it as a normal user, not as an user under tenant1 domain.
How can Alfresco recognize it?
I need your help because I didn't find any documentation on this situation…
Is there anyone who can suggest something, or give me a document that describe the integration with multi-tenancy and SSO?

I hope you write me soon

Regards
Danilo

Re: Multi-tenancy and SSO (CAS+LDAP)

protenus — Mon, 08 Dec 2008 21:00:53 GMT

Danilo,

While I cant help much (having same conceptual problems). We are also working on doing the same thing.

We are integrating with zimbra, so the users are located in differant domains
eg.
ou=people,dn=tenant1,dn=net
and
ou=people,dn=tenant2,dn=net

any ideas how to set up a LDAP to search both of these?

Re: Multi-tenancy and SSO (CAS+LDAP)

tan — Mon, 29 Jun 2009 18:46:43 GMT

Even I had a similar use case ,I did not find a neat solution but I made it work .

Not so great solution given below

1. Disable ldap sync by renaming ldap-synchronisation-context.xml to ldap-synchronisation-context.xml.sample in shared dir to avoid ldap import .If the import is enabled then users are created as normal users .

2. Now login as user1@tenant1 thru SSO(CAS +LDAP ) since LDAP authentication is enabled the user is created by alfresco under tenant1

Follow the same for tenant2 .

The trick is to avoid import and let alfresco create users if not available .Alfresco creates users under correct tenant as multi tenant feature is enabled.

I hope this crappy solution is of some help .

Warning : This is posted by an user who has just worked with alfresco for a month

Re: Multi-tenancy and SSO (CAS+LDAP)

pp20218 — Mon, 30 Aug 2010 12:43:30 GMT

Hi,
I want to use LDAP with Zimbra.
If I create tenants with out LDAP configuration, it is working as expected.
But when I use LDAP and create tenants I am not able to login.
I created a tenant named tenant1 and tenant2.
I am using userid as admin@tenant1 but it is not accepting.

Pls help.

Thanx

Re: Multi-tenancy and SSO (CAS+LDAP)

pp20218 — Fri, 03 Sep 2010 12:02:54 GMT

Can ANyone pls help on this?

Re: Multi-tenancy and SSO (CAS+LDAP)

pp20218 — Sat, 18 Sep 2010 10:26:24 GMT

Any help pls..

I am eagerly waiting for the reply.

Thanx in advance

Re: Multi-tenancy and SSO (CAS+LDAP)

pp20218 — Mon, 27 Sep 2010 13:37:31 GMT

Can anyone help pls?

Thanx in advance.

Re: Multi-tenancy and SSO (CAS+LDAP)

flopez — Thu, 05 May 2011 17:46:25 GMT

Any one? anything? …

Re: Multi-tenancy and SSO (CAS+LDAP)

shawn123 — Tue, 15 Nov 2011 11:30:26 GMT

The RSA Archer eGRC Platform is a multi-tenant software platform, supporting the configuration of separate instances in provider-hosted environments. These individual instances support data segmentation as well as discrete user experiences and branding. Individual instances store their data in physically separate databases while using a common hardware environment and a single deployment of RSA Archer application code. Users identify their instance as part of a manual login process, although instance identification can be automated through DNS or single sign-on configuration.