Alfresco SSO Guide

Introduction

This documentation describes the configuration required to setup Single Sign On (SSO) capabilities for Alfresco products. Single Sign On refers to the ability for users to access Alfresco Share, the Alfresco Digital Workspace, Alfresco Process Services and Alfresco Process Workspace in a single browser session by signing in only once to any of the applications.

Before you begin

See the supported platforms for the combinations of products and versions that are supported for SSO.

Authentication types

There are different authentication methods that can be used to configure SSO with. Each of these has additional prerequisites and detailed configuration steps:

Post-configuration

The following are items to be aware of after configuring SSO:
  • The Alfresco Process Services Administrator Application is not covered by SSO and is accessed using basic authentication.
  • If not using a Microsoft device and browser, users will be prompted to enter their credentials again when editing documents in Microsoft Office utilizing Alfresco Office Services (AOS).
  • User permissions need to be managed in individual products. For example, deactivating a user in Alfresco Content Services will not stop the same user from accessing Alfresco Process Services.
  • Supported Platforms The following are the Alfresco products and versions that can be combined to configure SSO.
  • Kerberos The configuration for Kerberos authentication will allow users to access Alfresco products by entering their credentials only once when logging into their Windows environment.
  • LDAP The configuration for LDAP authentication will allow users to access Alfresco products in a single browser session by entering their credentials only once and authenticating against an LDAP directory.
  • SAML The configuration for SAML authentication will allow users to access Alfresco products in a single browser session by entering their credentials only once and authenticating against a SAML identity provider. An LDAP directory is used for user and group management.

Sending feedback to the Alfresco documentation team

You don't appear to have JavaScript enabled in your browser. With JavaScript enabled, you can provide feedback to us using our simple form. Here are some instructions on how to enable JavaScript in your web browser.