Setup User / Group Management using SSO into External system

[hardik_thakkar1]

Hello there,

We have decided to use Activiti as BPM in our new project. We would like to setup user and group management to external system which is SSO engine of our organisation.

We have decided to use below approach-

- We would be using activiti-rest to interact with Activiti engine and decided to write custom wrapper on this rest services. So, before   accessing them all authentication and authorization activities should be handled using our SSO engine.

Is this possible approach? If yes, how to customize it?

This system has hundreds of groups and thousands of users, I believe Activiti is capable to handle them.

Any response on this would be much appreciated.

[hardik_thakkar1]

Thanks Ben for your response.

I think this solution should work for authenticating user to interact with activiti-rest.

What about to manage users and groups in external system (In our case, SSO Engine) instead of managing them in Activiti DB.

[b_schnarr]

We solved this by using a LDAP-directory.

[hardik_thakkar1]

LDAP would not work in our case as we have separate application for managing users and groups instead LDAP directory.

I read somewhere that we need to write custom Identity Services if we would like to manage users and groups in external system. Is this correct? If yes, is there any example of it how to customize identity services?

Any help much appreciated.

[martin_grofcik]

Hi Hardik,

You are right:
http://forums.activiti.org/content/override-default-identity-session-implementation


Regards
Martin

[hardik_thakkar1]

Thanks a lot for your replies.

So that is clear to me that I have to customize UserEntityManeger and GroupEntityManager. But how to configure them in activiti-config.xml so my customized classes will be used by default instead of existing classes.

Please revert.

[martin_grofcik]

Hi Hardik.
If you want to change User/GroupEntityManagers you have to set them in org.activiti.engine.impl.cfg.ProcessEngineConfigurationImpl#sessionFactories

Regards
Martin

[b_schnarr]

Hi,

maybe this post helps you : http://forums.activiti.org/content/authentication-alternatives-rest-webapp

Best regards
Ben