Advanced Alfresco Authentication from a Drupal Website Cristophe Pepe ECM Amplexor, Belgium

DEVCON 2012… Ian Norton was presenting “Alfresco.com – Farewell AVM, Hello Alfresco DM & Drupal”.

Connecting trough CMIS… Alfresco is CMIS compliant. “Drupal CMIS API” module can be used. Current version: 7.x-1.6

Drupal CMIS API module Problematic: authentication. Configuration accepts a single user only. $conf['cmis_repositories'] = array( 'default' => array( 'user' => 'cmis_user', 'password' => ’password', 'url' => ' ) );

CMIS API CMIS API module is useful when we want to show “public” Alfresco documents. But what if we want to display only documents an authenticated user has access to ?

CMIS external authentication Drupal module that allows authentication of an Alfresco user through a Drupal website. “/api/login” webscript Ticket

CMIS external authentication Drupal module that allows authentication of an Alfresco user through a Drupal website. “/api/login” webscript Ticket

CMIS external authentication CMIS External auth. Ticket Calls Alfresco with: User name: ROLE_TICKET Password: {Ticket} Overrides the “single user configuration”

CMIS external authentication CMIS External auth. Ticket Calls Alfresco with: User name: ROLE_TICKET Password: {Ticket} Overrides the “single user configuration”

CMIS ext. auth. - Configuration Drupal administration page

12 Drupal user login form Default Drupal login form is Overridden. An extra validation function is added: contains logic to get Alfresco ticket + Drupal user sync.

Drupal user synchronization When connecting for the first time with an Alfresco user… Drupal Alfresco … Drupal user is automatically created.

Drupal user synchronization When connecting for the first time with an Alfresco user… Drupal Alfresco … Drupal user is automatically created.

Login failure options Login Option 1Option 2 Login with Drupal user only ?  No CMIS repo access Use default “single user” config From CMIS API module ?  “Public” access only. Combine ?

Login failure options Login Option 1Option 2 Login with Drupal user only ?  No CMIS repo access Use default “single user” config From CMIS API module ?  “Public” access only. Combine ?

Demo Cristophe Pepe  manager Drupal user  contributor CMIS  Consumer  Default CMIS API module configuration 14

Demo 5 documents: “test 1” - “test 2”: public “test 3” - “test 4”: contributors “test 5”: managers

Demo Manager access

Demo Public access Contributor access

Alternatives CMIS API  CMIS_headerswing sub-module Demo module demonstrating how to pass user authentication from Drupal to the CMIS repository, providing SSO, via header-based authentication such as Basic Auth or NTLM. SSO osCaddie “osCaddie Drupal Alfresco is an integrated solution providing seamless communication between Drupal and Alfresco. Contents are synced with Alfresco whenever there is an update to content in Drupal, Alfresco will be updated. New content is created on Alfresco as soon as it is created on Drupal.” Does it solve auth. problem ? … to be investigated…

Alternatives CMIS API  CMIS_headerswing sub-module Demo module demonstrating how to pass user authentication from Drupal to the CMIS repository, providing SSO, via header-based authentication such as Basic Auth or NTLM. SSO osCaddie “osCaddie Drupal Alfresco is an integrated solution providing seamless communication between Drupal and Alfresco. Contents are synced with Alfresco whenever there is an update to content in Drupal, Alfresco will be updated. New content is created on Alfresco as soon as it is created on Drupal.” Does it solve auth. problem ? … to be investigated…

Resources CMIS External Authentication Sandbox on Drupal.org CMIS API osCaddie