How to integrate Keycloak with Alfresco Community 6.2

[miroslav]

Hi, I've tried few tutorials how to integrate Keycloak with Alfresco, but in the case of the latest version of the platform, none of them worked for me (probably my mistake). Is there any tutorial that has been tested for Alfresco Community 6.2? In most cases, I ended up with "barrer" authentication, which Alfresco does not support.

Thank you.

[afaust]

First of all, you should outline what kind of integration with Keycloak you want to achieve. The Alfresco Identity Management Service (AIMS) is based on Keycloak and supports Bearer authentication on the Repository, which can used with ADF-based applications out of the box. In Alfresco Enterprise 6.2.something they apparently added some support to Share, which will likely see a Community release with Alfresco 7.0 (whenever that happens to come out). There are various use cases of Keycloak integration that are currently entirely neglected by AIMS, which is the reason that I built my own integration.

[miroslav]

Hello, thank you for your reply, I would like to set up single sign-on authentication using Active Directory for Share and Repository tier. I'll check the integration you mentioned. Alfresco Identity Management Service (AIMS) is also accessible in the community edition?

[afaust · Accepted solution]

Yes, AIMS can be used in Community edition as well. Only the Share integration is not part of the last official community release and you'll either have to use a Share WAR from a different (Enterprise) release (Share is the same in Enterprise and Community) or wait until 7.0 is released.

[anandsingh]

I was able to download Alfresco Content Services Community: 7.0.0 (alfresco-content-services-community-distribution-7.0.0.zip).  Do you know if Keycloak integration with Share is now included in 7.0 community edition?  I tried it but redirection to Keycloak does not happen.  Wondering if anyone able to integrate Share with Keycloak.

[Matteo_Moretti]

I had the same problem

[EddieMay]

Hi @anandsingh 

Yes, I believe it is available for Share in ACS 7.0 - for both Community & Enterprise editions.

[qgou]

"Yes, I believe it is available for Share in ACS 7.0 - for both Community & Enterprise editions." I have enterprise 7.4 installed onto my local, I also have latest Keycloak installed onto my local. How to integrate Keycloak with Share? I proved my Keycloak authentication chain works in admin console ( on repo side).

[wejden]

@afaust 

Hello!

i already integrate alfresco to my projet with docker , and also integrate keycloak  .. i used basic configuration. so actully i can authentificate to alfresco with my own keycloak instance .  I only use  repository content ( no need for share at the moment).

My problem is how to manage rights/permission between alfresco and keycloak.

For example , i am trying to send claims (id:"") for example dynamically to my alfresco repository. it shoul be send in the jwt token? how to do it?

can u please give me an idea how to do it ? best way to do it?