Alfresco Activiti integration with PingFederate

[ashokhathal]

Hi All,

I want to know about how we can integrate Alfresco Activiti enterprise with Ping Federate.

Also, want to know about how User,Role and group are synced with Activiti.

[jearles]

A H,

Can you expand a little bit about your end goal with PingFederate is? What exactly are you trying to achieve?

And to your other question: There are a couple of database tables that store User/Role information, or you can synchronize over LDAP - again, your question is very vague, any details would help.

-JEarles

[ashokhathal]

Hi Jonathan,

Thanks for your reply.

Assume that External system is integrated with Activiti and Activiti will authenticate user based PingFederate token.

So whatever User/Role are defined in PingFederate which need to be synced with Activiti and that user can access Activiti process

[jearles · Accepted solution]

A H,

Activiti uses the standard Spring Security implementation. There are then several ways that you could go about doing this; use some google-fu and look into "Spring Security External Authentication", particularly, it will be helpful to look into PreAuthentication and the classes available surrounding that.

This will take custom code, but the implementation is totally possible.

Hope this helps in the right direction,
-JEarles

[ashokhathal]

What will be in case we are using PingFederate? how it will be work for PingFederate ?

[cjose]

FYI - If you haven't already seen this. There are some new SSO features introduced as part of the new release of Alfresco Process Services (Enterprise Activiti). More details available at OAuth 2 SSO overview | Alfresco Documentation