SSO support for Aikau apps

[sgupta]

I want to create a standalone Aikau app to show document list and has webscripts which get info from Alfresco server. I want to implement SSO for the standalone app.
Does Aikau support SSO using Kerberos? how can SSO be configured for this app?

[angelborroy]

We have this issue too, I asked Martin and Dave without success.

We have copied all Java classes from Alfresco to the Aikau app, but some tweaks are required. We're still working on this, I'll tell you if we have any advance.

[ddraper]

‌ apologies for not answering your question - I hadn't seen it before!

[ddraper · Accepted solution]

An Aikau standalone client (built using the Aikau Maven Archetype) is just a Surf application in the same way that Share is a Surf application. Share supports SSO because of the way that it is configured.

When we created the Aikau Archetype we essentially copied some of the key Java classes and Spring bean configuration from Share.

If you want to enable SSO in a standalone Aikau application then you just need to copy across the SSO related configuration from Share into your client (as suggested by ‌)

[angelborroy]

Thanks, Dave Draper‌

I forgot also about this question. Finally we managed to include key classes from Share in our Aikau app and SSO is working properly.

Maybe a blog post on this could be useful?

[ddraper]

Yes, definitely... If you're able to write up how you got it working that would be awesome! I've not actually tried to get it setup myself yet so it would definitely be useful.

[angelborroy]

Dave Draper​ finally I've managed to write a draft post (SSO support for Aikau apps | Programming and So ) and to provide a GitHub template (GitHub - angelborroy/aikau-kerberos-sso: SSO support for standalone Aikau client ) to show how an Aikau standalone client works with Kerberos SSO.

It's not perfect, but I think it can be enough.

[ddraper]

Great stuff, thanks Angel Borroy