Alfresco Version: Community - 5.1.0 (r127059-b7)
I have managed to successfully configure passthru for Share-SSO against our ActiveDirectory. Domain authenticated Users can login without problems.
The problem I am faced with now lies with our customer's users, which we create directly in Alfresco. Whenever a non-domain user tries to open our Share-Site, he gets met with a credentials prompt. Using that prompt, it is impossible to login with anything but a domain user.
Even when using the SSO-bypass from the documentation (https://our.alfresco.page/share/page/type/login ), a non-domain user is met with a credentials prompt.
When canceling the prompt twice, the non-domain user is presented with a blank page (https://issues.alfresco.com/jira/browse/MNT-15841 like in this case. Although I now see that this seems to have been fixed in the 201612GA version).
My question is: is it possible to completely skip the credentials-prompt on authentication failure, meaning that external, non-domain users would always just get presented with the normal share login screen? Or is this a limitation of NTLM SSO and we would be better off using another SSO method (for example Kerberos)?
Simply deploy a second Share instance and do not configure it for SSO. Otherwise there is no way to determine if a user will be able to perform SSO and suppress the popup pre-emptively.
Ask for and offer help to other Alfresco Content Services Users and members of the Alfresco team.
Related links:
By using this site, you are agreeing to allow us to collect and use cookies as outlined in Alfresco’s Cookie Statement and Terms of Use (and you have a legitimate interest in Alfresco and our products, authorizing us to contact you in such methods). If you are not ok with these terms, please do not use this website.