Switch from AD authentication to Alfresco authentication

[jonvargas]

Hello fellas.

Is there a way to authenticate users that previously logged in using Active Directory credentials but now they need to authenticate with local Alfresco authentication?

I've noticed that after disabling AD authentication globally, the users that logged in using AD, now appear as Inactive and I can't change their local password.

Any idea?

[afaust]

Hello,

you need to "move" those synchronized users over to being "local" users. This includes moving them to the zone AUTH.ALF and creating an "authentication" via the MutableAuthenticationService. Unfortunatel, that process is not covered by any UI and usually requires some coding either in JavaScript Console or normal development.

Regards
Axel

[kvadning]

Hi there!

I'm also facing the same issue where I want to "move" my AD users to local Alfresco. Could you please suggest a starting point for doing this?

Thank you!

[afaust]

I already did.
<cite>
This includes moving them to the zone AUTH.ALF and creating an "authentication" via the MutableAuthenticationService.
</cite>

The AuthorityService provides operations to add/remove an authority to/from zones, and the mentioned MutableAuthenticationService provides the operation to create the necessary local user account ("authentication"). I also mentioned that you need to write custom code for this (the services mentioned are best accessed from Java code).

[kvadning]

Would taking ChainingUserRegistrySynchronizer.updateAuthorityZones(String authorityName, Set<String> oldZones, final Set<String> newZones) 

be a good example for a starting point?

Sorry for being a nuisance but this area is a bit of a mystery to me.

[afaust]

Yes, that method can be used as a reference for this case.