topic Re: Generating an Alfresco Ticket on Behalf of another User? in Alfresco Archive

Generating an Alfresco Ticket on Behalf of another User?

praj — Thu, 19 Apr 2012 02:25:27 GMT

Hi,Is it possible through a combination of external (or appropriate) authentication using a proxyUserName to generate an Alfresco ticket on behalf of another user?E.g. proxy user logs in, runs the webscriptOST /alfresco/s/api/loginAnd generates a ticket for the target user which can then be used b

Re: Generating an Alfresco Ticket on Behalf of another User?

mitpatoliya — Thu, 19 Apr 2012 10:42:05 GMT

No, I do not think so.
And also logically it makes system insecure.
So, I do not think this feature will ever be there in any of the system.

Re: Generating an Alfresco Ticket on Behalf of another User?

mrogers — Thu, 19 Apr 2012 11:00:15 GMT

If you are using external authentication then you can pass in whatever token you want. Alfresco will simply trust whatever your external authentication system says.

Re: Generating an Alfresco Ticket on Behalf of another User?

praj — Mon, 23 Apr 2012 23:38:46 GMT

If you are using external authentication then you can pass in whatever token you want. Alfresco will simply trust whatever your external authentication system says.

Thanks for the advice. I've been through the external authentication documentation covered here:
http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems#External

My question relates to setting up same-signon between another system and Alfresco without the use of a 3rd party authentication system (LDAP, CAS, etc). From what I understand of the external authentication functionality, it requires the REMOTE_USER CGI variable to be set to enable pass-thru authentication into Share (looking specifically at same-signon into Share). Would there be a way to do this without doing it at the apache level? E.g. within a PHP script? Any suggestions?

Re: Generating an Alfresco Ticket on Behalf of another User?

mrogers — Tue, 24 Apr 2012 09:28:17 GMT

Any suggestions?

Why are you doing this? It seems a bit strange.

Re: Generating an Alfresco Ticket on Behalf of another User?

rdanner — Wed, 02 May 2012 04:33:58 GMT

Hi,

Is it possible through a combination of external (or appropriate) authentication using a proxyUserName to generate an Alfresco ticket on behalf of another user?

E.g. proxy user logs in, runs the webscript:
POST /alfresco/s/api/login

And generates a ticket for the target user which can then be used by the target user for authentication purposes?

Thanks

Praj

Are you thinking that your third party authentication would have to log in as a super user and then generate ticket for the user it's authenticating?

You should not have to do this. Take a look at the out of the box subsystems for supporting CAS. Another example is the CROWD plugin by AppFusion.

Re: Generating an Alfresco Ticket on Behalf of another User?

abarisone — Fri, 05 Oct 2012 09:47:01 GMT

Hi all,
we have a scenario where having Alfresco external authentication coming from a portal (trought CAS), we would need that a Call Center user could "impersonate" another user in order to carry out operations on behalf of another user.
We obtain a TGT for the CC user, but it is there an out-of-the-box function or procedure in order to achieve this impersonation?

Thanks,
Andrea