SSO/External Authentication still broken in 201611EA?

[davidd2go]

Hi

I tried to get SSO (with CAS) working on version 201611EA. According to the release notes earlier problems as reported by  in this bug should have been solved in the 201611EA release.

However I still see problems for which I filed a new bug-report here.

Since the details are described there I won't repeat them in this post.

Did anyone succeed in getting this to work on 201611EA or any other release after 5.1.f?

Regards,

David

[pinux]

Hi Ian,

I have successfully setup Alfresco 5.1g with CAS version 4.0 (unable to retrieve a valid pom file for 4.1 for LDAP support)

Now I can successfully login and logout from Alfresco through the CAS server. I have also integrated with CAS another service (Joomla website) and when I login in Joomla (or in Alfresco) I'm also logged in Alfresco (or Joomla).

But when I logout from Joomla (or in Alfresco) I logout from Joomla (and also CAS) but still remain logged in Alfresco (or Joomla); maybe the POST sent from CAS after the logout failed. 

What do you think is the problem? If as I suppose is related to browser session, can I construct a POST in Joomla (so in php) to send to Alfresco in order to invalidate Alfresco browser session? Such as this: 

curl -i -H "application/x-www-form-urlencoded" -X POST --data '{"redirectURL":"https://my-site/cas/logout","redirectURLQueryKey":"service","redirectURLQueryValue":"https://my-site"}' "https://my-site/share/page/dologout"

Thanks in advance,

Pino

[idwright]

To the best of my knowledge nobody has done anything about single sign out for Alfresco.

I guess you'd have to in some way extend the CAS client single sign out filter and install that into the Alfresco instance

I think what you suggest would work for your case - you probably don't even need the data (assuming Joomla logs you out of CAS)

[pinux]

Thanks, Ian!

I tried with POST but it works only if I set the cookie with JSESSIONID that is present in the header of the request sent by the browser to Alfresco; is there any way to produce the same POST that should be sent from joomla code?

Thanks in advance.

Pino