search

Alfresco / alfresco-identity-service

Repository for the Alfresco Identity Service
Apache License 2.0
34 stars 32 forks source link

Is there any OIDC integration doc? #155

Open letusfly85 opened 1 year ago

letusfly85 commented 1 year ago

Hi, thank you for great service.

Now, I'm trying integrating OIDC (such as Auth0) to Alfresco sign in.

I successfully launched keycloak and alfresco services by using docker-compose. And finished setting OIDC settings on keycloak admin console.

But the login screen still show user/password styels. How can I change the default login screen to OIDC (such as Auth0 or other login) screens... ?

laszlo-t commented 1 year ago

@letusfly85 there is a good tutorial about the integration: https://argondigital.com/blog/ecm/configuring-alfresco-identity-service/ and you can change the default identity provider: https://www.keycloak.org/docs/latest/server_admin/#default_identity_provider

letusfly85 commented 1 year ago

@laszlo-t

Thank you for sharing the doc. I have read this doc, but this doc says that we need LDAP for IdP, if there are no IdP on my site, how can we define authentication flow after OIDC login succeeded..?

laszlo-t commented 1 year ago

First of all, this area is also new for me but just working on similar tasks.

LDAP is not a must for authentication but can be useful to synchronize user details between alfresco and other systems.

Perhaps you can try something like this: Alfresco Content App or Share, etc. -------> Alresco Indentiy Service (keycloak) ----OIDC----> IdP (e.g. Auth0)