topic Re: Authentication via client certificate in Alfresco Archive

Authentication via client certificate

aleksandarm — Wed, 24 Sep 2014 08:28:57 GMT

Hello,we have a requirement that the users should be able to authenticate using client certificates. Users only have access to Share application.To accomplish this, so far, we have done the following customizations/extensions:1. A custom share page is defined, with authentication set to none, in or

Re: Authentication via client certificate

angelborroy — Wed, 24 Sep 2014 08:58:23 GMT

We've done something similar by extending SSO mechanism and passing username to SSOAuthenticationFilter.

It would be a way to accomplish your development.

Re: Authentication via client certificate

aleksandarm — Thu, 25 Sep 2014 14:20:17 GMT

Thanks for the reply,
I'l follow your suggestion and look into this mechanism.

Re: Authentication via client certificate

aleksandarm — Thu, 02 Oct 2014 11:30:23 GMT

Angel Borroy, thanks again for your suggestion, it was very useful

In case that someone ever find it useful, we ended up doing the following:
5. Custom share filter is defined, which adds HttpRequest header containing user name extracted from certificate,
and passes it further down the filter chain. In a way, this filter within share appliication acts like an external
authentication system
6. External authentication is configured on the repo, and the way how Share passes authentication
information to the Repo is customized according to https://devcon.alfresco.com/sanjose/sessions/unlocking-secrets-alfresco-authentication