You are here

Default authentication chain

The default product configuration has a simple chain with one member. This is an instance of the alfrescoNtlm subsystem type with and ID of alfrescoNtlm1.

This is expressed in the built-in defaults in the file as:


You can configure the properties of alfrescoNtlm1 using the global properties file.

Note: This subsystem instance does not have SSO enabled, by default.

To switch from password-based login to NTLM-based SSO, set the following property in the file.


This basic use of NTLM requires Alfresco Content Services to store its own copies of your MD4 password hash, which means your user ID and password must be the same in both Alfresco Content Services and your Windows domain.

For direct authentication with a Windows domain server, without the need to synchronize accounts in Alfresco Content Services and the domain, use the pass-through (passthru) subsystem type.

Sending feedback to the Alfresco documentation team

You don't appear to have JavaScript enabled in your browser. With JavaScript enabled, you can provide feedback to us using our simple form. Here are some instructions on how to enable JavaScript in your web browser.