topic Re: Single Sign Out in Alfresco Archive

Single Sign Out

shibu — Mon, 12 Aug 2013 07:38:44 GMT

I have done External SSO as described in following link :http://docs.alfresco.com/4.2/index.jsp?topic=%2Fcom.alfresco.enterprise.doc%2Ftasks%2Fauth-alfrescoexternal-sso.htmlConfigured Alfresco to accept a user name from an HTTP header.Now, when the user clicks the link http://localhost:8080/share/pa

Re: Single Sign Out

kaynezhang — Mon, 12 Aug 2013 09:53:00 GMT

Maybe you can write a webscript and deploy into share,and which call sitedata.logout() method to logout
When you log out from MyWebApp call the webscript to logout from share

Re: Single Sign Out

shibu — Tue, 13 Aug 2013 07:38:07 GMT

Thanks for your answer. I wil try oy out.

Re: Single Sign Out

idwright — Thu, 05 Sep 2013 15:25:44 GMT

I'm not sure that http://localhost:8080/share/page/dologout will log you out as you may still be signed in to your single sign on system.

You've got two problems here - first logging out from Alfresco/Share and from the single sign on system.

I got Share to logout from both (for CAS) by overriding the logout controller - essentially replace org.alfresco.web.site.servlet.SlingshotLogoutController

More details here http://tech.wrighting.org/2011/11/08/share-cas-logout

Then you need the MyWebApp logout to leave the SSO, and the SSO system to tell your Alfresco authentication system to log out.

If you are using CAS and mod_auth_cas you could try CASSSOEnabled On (experimental) or a short(ish) time out to make mod_auth_cas revalidate (as it caches the credentials)
(Be aware that if you are using CAS there are changes planned for v4 which should be out fairly soon)