topic Re: Alfresco authentication with Active Directory in Alfresco Forum

Alfresco authentication with Active Directory

arundech_l — Wed, 07 Jun 2017 08:48:43 GMT

Dear allCan I configure Alfresco 5.1 CE to authenticate with Active Directory without importing users from Active Directory into Alfresco?I'll create users in alfresco manually but authenticate on Active Directory when do login.Is it possible?Thanks.

Re: Alfresco authentication with Active Directory

mrks_js1 — Wed, 07 Jun 2017 08:52:23 GMT

No - If you create them manually they will be in a different repository.

Re: Alfresco authentication with Active Directory

arundech_l — Wed, 07 Jun 2017 08:55:20 GMT

Hi Markus

Thanks for your reply

If I set ad configure in alfresco-global.properties, alfresco will always import user into repository, right?

Thanks.

Re: Alfresco authentication with Active Directory

mrks_js1 — Wed, 07 Jun 2017 09:32:40 GMT

you can enable/disable both parts via these properties: ldap.authentication.active & ldap.synchronization.active
but if you login with an ldap user, it will be synchronized. it might not have all the properties from ldap but it will be in your system.

Re: Alfresco authentication with Active Directory

arundech_l — Wed, 07 Jun 2017 09:34:41 GMT

Thanks so much.

Re: Alfresco authentication with Active Directory

mrks_js1 — Wed, 07 Jun 2017 09:41:33 GMT

Maybe it is more helpful if you let us know what you are trying to achieve? to me it sounds like you have a whole bunch of users in your ldap but only a small group of them should have access to alfresco respectively be synchronized.

Re: Alfresco authentication with Active Directory

arundech_l — Thu, 08 Jun 2017 03:43:54 GMT

The thing is in AD has only 1 OU which contain all users and I have to configure alfresco to authen with this AD. But the owner of this AD not allow me to import all users into alfresco, he allow only the users who need to use alfresco.

Sorry I just saw that I didn't submit my reply.

Re: Alfresco authentication with Active Directory

cver — Thu, 08 Jun 2017 08:49:37 GMT

I had / have? a similar problem with Alfresco 4.2 ONE : there are many non-Alfresco users in our AD, many of which are "non persons" (meeting rooms etc) which made it tricky to stay below the licence limit. The key to slve it was to set up a filter in the sync page. Maybe it could work for you be as well ? That way, only one part of the AD is sync'ed. Of course in your case it means that the AD has to contain some field that can be used to select only Alfresco users.

Re: Alfresco authentication with Active Directory

arundech_l — Thu, 08 Jun 2017 09:11:30 GMT

Hi Christophe

Thanks for your suggestion. Now I can sync AD with my requirement by using ldap.authentication.active & ldap.synchronization.active properties as Markus Joos's suggestion.

Thanks.

Re: Alfresco authentication with Active Directory

pratu9 — Fri, 06 Oct 2017 06:51:23 GMT

Hello Markus,

I am facing issue with user synchronization. Before we created users in the AD and added to Alfresco group for login. But now we are facing issue related to user login. If we create a new user on the AD it will not able to log in on Alfresco. We want to create users locally on Alfresco but new user option in Admin console is disabled. Could you please help with this?

Thanks,

Pratiksha