topic Re: SSO with IMAP in Alfresco Archive

SSO with IMAP

dbiggins — Fri, 31 Oct 2014 15:41:53 GMT

Good Morning!I am trying to determine what SSO with IMAP looks like.We have a 4.2f CE environment in which SSO with kerberos against AD appears to be working well. We can have we browsers go to https://server.my.com/alfresco and https://server.my.com/share and they will be logged in correctly witho

Re: SSO with IMAP

mrogers — Fri, 31 Oct 2014 16:44:50 GMT

Unfortunately I don't think the IMAP extension to allow kerberos authentication is implemented in alfresco.

Re: SSO with IMAP

dbiggins — Fri, 31 Oct 2014 17:54:46 GMT

Thanks for the quick followup!

Based on what I'm reading, it seems like I should be able to get the sharepoint connectivity to be SSO as well, right?

I'm having a few problems, but I assume it's because I have to get my jetty cert signed and my windows 7 clients authentication defaults set, vs this being not possible.

Dan

Re: SSO with IMAP

approveme — Tue, 11 Nov 2014 11:13:17 GMT

1) SSO doesn't work with POP or IMAP and numerous third party application (adwords, etc). It relys on the cached Gmail password, or you can enable two factor authentication and set a password in Gmail for these applications.This requires maintenance of two passwords defeating the security of SSO for email.

2) Secondary email accounts (service, group) redirect to crowd. This requires a domain account referencing them which is shared among users. This is a PCI violation as we've discovered. Looking to create a subdomain within GMail to bypass Crowd authentication. No luck so far. Thoughts?