topic Re: Switch from AD authentication to Alfresco authentication in Alfresco Archive

Switch from AD authentication to Alfresco authentication

jonvargas — Thu, 02 Jun 2016 06:26:05 GMT

Hello fellas.Is there a way to authenticate users that previously logged in using Active Directory credentials but now they need to authenticate with local Alfresco authentication?I've noticed that after disabling AD authentication globally, the users that logged in using AD, now appear as Inactive

Re: Switch from AD authentication to Alfresco authentication

afaust — Thu, 02 Jun 2016 07:43:02 GMT

Hello,

you need to "move" those synchronized users over to being "local" users. This includes moving them to the zone AUTH.ALF and creating an "authentication" via the MutableAuthenticationService. Unfortunatel, that process is not covered by any UI and usually requires some coding either in JavaScript Console or normal development.

Regards
Axel

Re: Switch from AD authentication to Alfresco authentication

kvadning — Thu, 09 Jun 2016 09:19:51 GMT

Hi there!

I'm also facing the same issue where I want to "move" my AD users to local Alfresco. Could you please suggest a starting point for doing this?

Thank you!

Re: Switch from AD authentication to Alfresco authentication

afaust — Thu, 09 Jun 2016 10:32:06 GMT

I already did.
<cite>
This includes moving them to the zone AUTH.ALF and creating an "authentication" via the MutableAuthenticationService.
</cite>

The AuthorityService provides operations to add/remove an authority to/from zones, and the mentioned MutableAuthenticationService provides the operation to create the necessary local user account ("authentication"). I also mentioned that you need to write custom code for this (the services mentioned are best accessed from Java code).

Re: Switch from AD authentication to Alfresco authentication

kvadning — Wed, 15 Jun 2016 12:44:00 GMT

Would taking ChainingUserRegistrySynchronizer.updateAuthorityZones(String authorityName, Set<String> oldZones, final Set<String> newZones)

be a good example for a starting point?

Sorry for being a nuisance but this area is a bit of a mystery to me.

Re: Switch from AD authentication to Alfresco authentication

afaust — Wed, 15 Jun 2016 15:47:47 GMT

Yes, that method can be used as a reference for this case.