SSO external authentication based on session attribute

[angelborroy]

Hi,

Our client uses its own SSO system, which includes one HTTP Filter in charge of managing session attributes in order to identify the user.  As far as I know, Alfresco does not support external authentication based on session attributes.

So, we're thinking about overriding

SSOAuthenticationFilter‍

from Alfresco in order to develop a customized

wrapHeaderAuthenticatedRequest‍

able to extract user identification from one specified attribute of session object. Alfresco Share configuration could be as usual: add external authentication entries in

alfresco-global.properties‍

and modify

web.xml‍

to replace Alfresco SSO filter with the customized one.

Is there any better way to achieve this?

Thanks in advance.

[ivo_c_costa]

I'm also doing some changes to the authentication chain, and so far it seems that only the main application allows you to extend it with out changing any core. I did not find any way of avoiding the web.xml change in Share