topic Difference between platform endpoints? in Alfresco Forum

Difference between platform endpoints?

idwright — Fri, 13 Jan 2017 10:44:14 GMT

I haven't found any documentation about this so I thought I'd ask a question.(I have all this working, I'm just trying to understand it all a bit better)My aim is to have SSO set up and configured - share is relatively straightforward but I'm trying to understand the detail behind the platform/repo

Re: Difference between platform endpoints?

cesarista — Fri, 13 Jan 2017 14:35:34 GMT

Hi Ian:

I have the same question. First, I agree that Share SSO is quite straightfoward, configuring external auth subsystem and enabling the Remote configuration in Share. For old Alfresco Explorer, we needed to add additional cas client library in /alfresco/WEB-INF/lib and to change web.xml as you commented, which is not necessary for Alfresco 5, except in Admin Console (and maybe for /alfresco/webdav).

On the other hand, I can only say that I have seen the WCS endpoint, when activating Remote config in Alfresco Share configured for an external or NTLM based SSO. I understood that Alfresco Share needed /wcs endpoint to pass NTML challenge for Alfresco Repository Services (in case of AlfrescoNtlm with SSO). I would expect in this case, that once enabled /wcs you can go directly to admin console via /alfresco/wcs instead of /alfresco/s. Maybe it is not the case with an external web SSO like CAS.

Regards.

--C.

Re: Difference between platform endpoints?

afaust — Fri, 13 Jan 2017 16:10:28 GMT

The /wcs endpoint is essentially the same as the /s endpoint, but only with a different HTTP authentication factory being used during the dispatch to the web script layer. The /s endpoint (actually, the /service endpoint - /s is just an alias) uses a simple authentication factory that only supports HTTP BASIC. /wcs (or to be more precise /wcservice) uses an authentication factory that ties in with the Repository-tier SSO handling and thus is required to be used by Share when enabling SSO there.