SSO Headers from OpenAM

[koven]

Hi

I'm trying to configure Alfresco with OpenAM. When I configure Alfresco to get Cookies from openAM I can see those in firefox with several tools which it's a normal behaviour.

But when I configure Alfresco to get Headers from OpenAM i don't know what's going on because Alfresco requests again credentials, If i set headers with add-on in firefox then everything works ok.

I can see OpenAM is sending headers but I don't know Alfresco what is doing to that Headers. Is there any security issues in Alfresco? Any flag to disable?

Thanks for your help

[openpj]

In Alfresco you can enable the external authentication subsystem for configuring the HTTP header sent by OpenAM that will bring the username of the user, please see the following page:
http://docs.alfresco.com/4.1/index.jsp?topic=%2Fcom.alfresco.enterprise.doc%2Fconcepts%2Fauth-extern...

Hope this helps.

[koven]

Hi OpenPJ

I've tried all in that guide but nothing works. I don't know if Alfresco is blocking headers from OpenAM in another level because Cookies are working ok although cookies is not the goal for SSO.

If you've any tip beside documentation please let me know, because it's the only thing is missing for this integration, and there is not an official guide or a blog for someone who did this job.

I found some posts in this forum but there is no way to Alfresco get these headers.

Thanks for your help OpenPJ.