topic Associating the auth ticket with a resource/ single use ? in Alfresco Archive

Associating the auth ticket with a resource/ single use ?

shikarishambu — Tue, 24 Nov 2009 16:58:03 GMT

I have a custom application that is calling into Alfresco to retrieve the documents from Alfresco. The custom client manages all the user authentication and authorization and interfaces with Alfresco using a single login. We are using webscripts to do the login and search. I would like to ensure tha

Re: Associating the auth ticket with a resource/ single use ?

mrogers — Tue, 24 Nov 2009 17:14:44 GMT

If you didn't use a proxy account you would not need to jump through hoops.

Can you get some sort of SSO working between your application and alfresco?

Re: Associating the auth ticket with a resource/ single use ?

shikarishambu — Tue, 24 Nov 2009 19:26:04 GMT

The reason why we decided to use a proxy account rather than have user accounts in Alfresco is our application/ solution treats ECM as a pluggable component. So, we want the ability to manage access to the documents in our application (and, not have it replicated/ setup in the different ECM flavors that are out there). I realize that it does not make full use of an ECM's capabilities.

I could possibly get a SSO solution in place but it still will have to be a proxy/service account. I do think this is a valid integration scenario - accessing an external resource through a single service account. What I am trying to achieve is nothing more than stopping a replay attack in case of a web/ web service application.

Thanks