12-24-2017 07:45 AM
I am trying to login(thereafter search against the repository) from third party application against the kerberos enabled alfresco through REST API.
Basic HTTP authentication is allowing me to do it but then it has its own negatives as I have to pass everything through the query parameters
But when I am trying to do through /alfresco/api/-default-/public/authentication/versions/1/tickets, it is giving me "Please log in" response in the browser, SSO is not happening that means. I have enabled CORS too in tomcat but I think that might not be the issue.
Is there a way we can do SSO from external application through REST API in a kerberos enabled alfrescos?
12-25-2017 11:56 AM
The tickets API that you are calling has been explicitly defined to not require pre-emptive authentication, i.e. via SSO. It always requires user/password authentication via request parameters. Given the current API design, you cannot obtain a ticket when using Kerberos SSO (from the client against a Kerberos-enabled Alfresco), but you "should" be perfectly capable of using all regular APIs with the same Kerberos authorisation header without having to obtain a ticket first.
I put "should" in quotes because supporting SSO in all possible combinations is something that has been a bit of a problem across various versions, so I am not 100% sure.
Explore our Alfresco products with the links below. Use labels to filter content by product module.