This document discusses user authentication with the Alfresco Identity Service. It describes how the Identity Service provides a single point of contact for modern user authentication and manages authentication via JSON Web Tokens (JWT). It also provides information on configuring the Identity Service for authentication in Alfresco Content Services and Activiti applications.

1. FrkCorti

2. Learn. Connect. Collaborate.
Credentials
login & password
Sessions
on backend services
Identity
Management
on backend services

3. Learn. Connect. Collaborate.
CC by

4. Learn. Connect. Collaborate.
•
•
•
alf_ticket

5. Learn. Connect. Collaborate.
•
•
•
alf_ticket

6. Learn. Connect. Collaborate.
Alfresco Content Services
Authentication
Ticket
Usage

7. Learn. Connect. Collaborate.
CC by

8. Learn. Connect. Collaborate.
•
•
•
(*) https://en.wikipedia.org/wiki/JSON_Web_Token

9. Learn. Connect. Collaborate.
Authentication
Session
Client
Usage
Authentication
Session
Client
1
2
3
13
2Usage

10. Learn. Connect. Collaborate.
CC by
DBP

11. Learn. Connect. Collaborate.
CC by

12. Learn. Connect. Collaborate.
CC by

13. Learn. Connect. Collaborate.
app.config.json*
{
...
"ecmHost": "http://localhost:3000/ecm",
"bpmHost": "http://localhost:3000/bpm",
...
}
(*) Calls need to be proxied to avoid CORS

14. Learn. Connect. Collaborate.
• LoginComponent
•

15. Learn. Connect. Collaborate.
CC by

16. Learn. Connect. Collaborate.
Alfresco
Identity
Service
Authentication
DBP Session
Client
Usage
1
2
3
Usage
3
A single point of contact with the most modern and
advanced ways to manage the user authentication. CC by

17. Learn. Connect. Collaborate.
#openness

18. Learn. Connect. Collaborate.
#openness

19. Learn. Connect. Collaborate.
•
•
•

20. Learn. Connect. Collaborate.

21. Learn. Connect. Collaborate.
•
•

22. Learn. Connect. Collaborate.
•
•
(*) https://en.wikipedia.org/wiki/JSON_Web_Token

23. Learn. Connect. Collaborate.
Digital Business Platform
CC by
JWT token
Yes!

24. Learn. Connect. Collaborate.
CC by

25. Learn. Connect. Collaborate.
•
alfresco-global.properties
...
authentication.chain = identity-service1:identity-service, ...
...
tomcat/shared/classes/alfresco/subsystems/Authentication/identity-service
/identity-service-authentication.properties
•
alfresco-global.properties

26. Learn. Connect. Collaborate.
•
alfresco-global.properties
...
authentication.chain = identity-service1:identity-service, ...
...
tomcat/shared/classes/alfresco/subsystems/Authentication/identity-service
/identity-service-authentication.properties
•
alfresco-global.properties

27. Learn. Connect. Collaborate.
•
tomcat/webapps/activiti-app/WEB-INF/classes/META-INF/activiti-app/activit
i-identity-service.properties

28. Learn. Connect. Collaborate.
•
tomcat/webapps/activiti-app/WEB-INF/classes/META-INF/activiti-app/activit
i-identity-service.properties

29. Learn. Connect. Collaborate.
•
tomcat/webapps/activiti-app/WEB-INF/classes/META-INF/activiti-app/activit
i-identity-service.properties

30. Learn. Connect. Collaborate.
•
•
•

31. Learn. Connect. Collaborate.
CC by

32. Learn. Connect. Collaborate.

33. Learn. Connect. Collaborate.
CC by

34. Learn. Connect. Collaborate.
Since APS 1.X >= 1.9
(not on APS 2)
Since ADF 2.4.0

35. Learn. Connect. Collaborate.
CC by

36. Learn. Connect. Collaborate.

37. Learn. Connect. Collaborate.
User authentication
is the only supported
CC by

38. Learn. Connect. Collaborate.
User authentication
is the only supported
(don’t worry and stay tuned!)
CC by

39. Learn. Connect. Collaborate.
CC by

40. Learn. Connect. Collaborate.
CC by
•
•
•
•
•
#roadmap

41. Learn. Connect. Collaborate.
•
•
•
•
•
CC by

42. Learn. Connect. Collaborate.
CC by

43. FrkCorti