OAuth-like Authentication for Alfresco/LDAP?

[ddelapasse]

Working on a project that will provide a front-end & middle-tier on top of Alfresco.  However, we'd like to leverage the Alfresco LDAP configuration so our users can use their normal network accounts.

I'd prefer for our code to just turn over the authentication completely to Alfresco; similar to how web apps use OAuth2, so that the credential are entered directly into the Alfresco UI without us having access.

Any way to accomplish this?

[mrogers]

What's wrong with Alfresco's LDAP?   And what do you mean by 'their normal network accounts'

[ddelapasse]

Our Alfresco is already linked with LDAP, but my middle tier currently makes the REST call to "login" to create a ticket.  I would prefer something like you see on sites where you can select "log me in using Facebook".  I'd like to directly forward the user into an Alfresco popup and receive the ticket back from that.  That way my app doesn't ever have "custody" of the user's password. 

Does that help to clarify?  Is it possible?