Combination View Flat View Tree View
Threads [ Previous | Next ]
toggle
Scott Gibson
LDAP SSO and iframes
June 12, 2009 3:59 PM
Answer

Scott Gibson

Rank: New Member

Posts: 19

Join Date: June 12, 2009

Recent Posts

I have Liferay 5.2.3, SugarCRM 5.2.0e, Alfresco 3.2 Preview 2, and Zimbra 5.0.1 all sharing the same Zimbra-based LDAP installation.

My only desire at the present time is to be able to have all users that authenticate to Liferay be presented with SugarCRM, Alfresco, and Zimbra tabs by default, and allow them access to each of those in a single-sign-on setup. True integration can come later - I am just interested in the basic portal functionality of getting all 3 services in one place for the user without the need to have them authenticate individually to each.

I have poured over forums here and at the other 3 open-source communities, and I am just not finding very good, concise answers as to how to get this done.

Does anyone have any clues to get me started please?

I would greatly appreciate it!

Thanks,
Scott
Nagarjun Mangala
RE: LDAP SSO and iframes
July 5, 2009 3:55 PM
Answer

Nagarjun Mangala

Rank: New Member

Posts: 4

Join Date: August 3, 2008

Recent Posts

Develop a custom theme which has all the 3 tabs and assign the theme to the default logged-in user's home page.

Based on the roles and access priveleges you can hide/display the tabs. when the user clicks on the tab take them to the respective applications.

For SSO SugarCRM, Alfresco, and Zimbra resouces should be protected by the SSO plugin (webgate etc). The SSO authentication cookie will take care of the access to these applications based on the policies and access setup. The applications can either decode the cookie to get the principal or retrieve the principal from the Request Header and create the session.

Logout should invalidate the cookiee and session.

We have used Oracle Access Manager for SSO and we have different apps under SSO.
Scott Gibson
RE: LDAP SSO and iframes
July 14, 2009 9:26 AM
Answer

Scott Gibson

Rank: New Member

Posts: 19

Join Date: June 12, 2009

Recent Posts

Thanks for your reply. We have used the preauth function to get Zimbra working, but I do have a question about functionality once SSO is implemented. Right now, for instance, if I click on the Zimbra tab, it logs me into Zimbra and throws me into the default page. If I click on another tab (for instance, the Liferay Blog on another page), and then click back on Zimbra, it will send me right to the default page again. Is there any way to save the state that Zimbra was in such that when I click back on that tab, it will be right where I left off (like switching windows in your operating system)? I can foresee users beginning to draft an email, want to switch over to the doc library to look something up, and return back to their draft to finish it up. As it is setup currently, that will not work.

Thanks,
Scott
j detert
RE: LDAP SSO and iframes
April 5, 2010 7:11 AM
Answer

j detert

Rank: New Member

Posts: 1

Join Date: April 5, 2010

Recent Posts

Nagarjun Mangala:
Develop a custom theme which has all the 3 tabs and assign the theme to the default logged-in user's home page.

Based on the roles and access priveleges you can hide/display the tabs. when the user clicks on the tab take them to the respective applications.

For SSO SugarCRM, Alfresco, and Zimbra resouces should be protected by the SSO plugin (webgate etc). The SSO authentication cookie will take care of the access to these applications based on the policies and access setup. The applications can either decode the cookie to get the principal or retrieve the principal from the Request Header and create the session.

Logout should invalidate the cookiee and session.

We have used Oracle Access Manager for SSO and we have different apps under SSO.


Hello Nagarjun,

I'm trying to find people or organizations who have used Oracle Access Manager to achieve SSO, and have integrated Zimbra as one of the applications in the SSO. It sounds like you've done that. Is that true? If so, do you mind sharing some information about how it was done?

Thanks,

Jon
Hangover Liferay
RE: LDAP SSO and iframes
March 13, 2012 4:33 PM
Answer

Hangover Liferay

Rank: New Member

Posts: 16

Join Date: May 18, 2010

Recent Posts

Hi Nagarjuna,
I am looking to integrate OAM with Liferay, Look like you were able to make it work. Please let me know how to go about it.

Jhon, Were you able to get it running ?