SSO for WebService

[tobias_amon]

Hello There,

is there a way to modify the AuthenticationService, to be able to verify a ticket from CAS-SSO server??

Thanks…

[aldebaranl2]

Hi all,

I have the same needs.
Is there a solution now ?

Thanks

[mikewaters]

What exactly do you need to achieve - to authenticate a web service call, or to authenticate a ticket passed as part of a REST call?

If you just want to authenticate a web service call from an external system you can use the CAS SSO filter described in the wiki:

http://wiki.alfresco.com/wiki/Central_Authentication_Service_Configuration

You would need to modify the filter mappings to protect the web service calls.

If you need to grab the ticket from elsewhere out of the web service call and authenticate against that then you will need to create a new implementation of the AuthenticationService as described briefly here:

http://wiki.alfresco.com/wiki/Security_Services

The CAS Client filter contains the code to verify a CAS ticket so you should be able to call that from your code.
If you don't want to get into the CAS code then you can have your custom AuthenticationService call a URL that is protected by the CAS filter. If that call succeeds then the ticket is valid.

Hope that helps

[alfuser008]

Hello Mike,

hopefully you can help me with more information on this issue. I have a working CAS-SSO-Alfresco installation, the CAS-SSO is also used with Zarafa (for e-mail and collaboration). There is an Zarafa-plugin which allows you to store e-mails directly in Alfresco. This plugin uses the Alfresco-(SOAP)-Webservices (AuthenticationService?wsdl). Is there a way to overcome the authentication with username and password to get a ticket and use the CAS-Session instead.

Thanks a lot in advance!

Best regards

Stephan

[dashacoen]

A Philippine Call Center is a usual sight today in the country. Many call centers have emerged in different key cities, proving that the outsourcing industry in the Philippines is continuing to grow. It would be interesting if the country will be able to overtake India as the top outsourcing destination.

[chengdong]

Hi
Anyone knows why the AuthenticationUtils.startSession() does not work in JSP. It work in standalone java class. Do I need to add any certificate into the server?
I just do not know what is wrong.

Thanks for help





   try {
         WebServiceFactory.setEndpointAddress("https://cms-dev.vbi.vt.edu/alfresco/api");
          AuthenticationUtils.startSession("admin", "admin");      
         String ticket = AuthenticationUtils.getTicket();         
         return ticket;

      } catch (Exception serviceException) {
         throw new RuntimeException("Problem invoking web script",
               serviceException);
      }
      finally {           
       // End the session
       AuthenticationUtils.endSession();
       if (conn != null) conn.disconnect();
       }
   }%>

[lourdes]

Good morning, I need the same.
Have you found a way to authenticate the web service from cas?

How do I replace this call?
AuthenticationUtils.startSession(username,password);

if my user is already authenticated by the CAS

[rinachen]

Shouldn't you be Outsourcing Tech Support in order to address some of the problems?

[clock1988]

Me too. How can I change Startsession function to authenticate with SSO?

[lewcrippen12]

Hi guys,

Hey…..guys…..I don't have any idea of it…….I think u should take help from net or any expert who know about networking or networking engineer.


Thanks


Regards
~~Lew~~

Outsource Web Development Services