Using Liferay Portal with LDAP and Single sign-on
•
2 j'aime•7,900 vues
During the 5th Liferay Netherlands user group meeting, Sander Bilo from the Firelay team (then Proteon) discussed during a lightning talk the benefits for a portal like Liferay, its users and administrators, to connect to a LDAP (like Active Directory) using a Single Sign-on server.
Recommandé
Recommandé
Contenu connexe
Tendances
Tendances (19)
En vedette
En vedette (8)
Similaire à Using Liferay Portal with LDAP and Single sign-on
Similaire à Using Liferay Portal with LDAP and Single sign-on (20)
Dernier
Dernier (20)
Using Liferay Portal with LDAP and Single sign-on
- 1. Using Liferay portal with LDAP and Single-Sign -On Sander Bilo Java/Linux consultant
- 2. Using Liferay portal with LDAP and Single-Sign -On Sander Bilo Java/Linux consultant Or
- 3. Using Liferay portal with LDAP and Single-Sign -On “how to connect your stuff” Sander Bilo Java/Linux consultant Or
- 4. Introduction
- 6. Scenario
- 7. Scenario Introduction of Liferay as collaboration platform within an existing environment.
- 8. Risks
- 10. Risks • Legacy/other systems • User acceptance
- 11. Risks • Legacy/other systems • User acceptance • Security
- 12. Risks • Legacy/other systems • User acceptance • Security • (App.) Administrators / ICT departments
- 15. Legacy/other systems • ‘This piece of software is just better suited for the job’
- 16. Legacy/other systems • ‘This piece of software is just better suited for the job’ • ‘We don't have time to implement this functionality in Liferay (yet)’
- 17. Legacy/other systems • ‘This piece of software is just better suited for the job’ • ‘We don't have time to implement this functionality in Liferay (yet)’ • ‘Other parties use this software, we need it to stay compatible’
- 18. Legacy/other systems • ‘This piece of software is just better suited for the job’ • ‘We don't have time to implement this functionality in Liferay (yet)’ • ‘Other parties use this software, we need it to stay compatible’
- 19. User acceptance
- 20. User acceptance • ‘Oh, no not another system I have to use’
- 21. User acceptance • ‘Oh, no not another system I have to use’ • ‘Do I also have to register here?’
- 22. User acceptance • ‘Oh, no not another system I have to use’ • ‘Do I also have to register here?’ • ‘My current tools work fine’
- 23. User acceptance • ‘Oh, no not another system I have to use’ • ‘Do I also have to register here?’ • ‘My current tools work fine’ • ‘This tool will make me obsolete!’
- 24. User acceptance • ‘Oh, no not another system I have to use’ • ‘Do I also have to register here?’ • ‘My current tools work fine’ • ‘This tool will make me obsolete!’ • ‘What is the login/password for this system? I lost track!’
- 25. User acceptance • ‘Oh, no not another system I have to use’ • ‘Do I also have to register here?’ • ‘My current tools work fine’ • ‘This tool will make me obsolete!’ • ‘What is the login/password for this system? I lost track!’
- 26. Security
- 27. Security • ‘I got a new password for this application, lets put it on a post-it’
- 28. Security • ‘I got a new password for this application, lets put it on a post-it’ • ‘Lets use the same password everywhere’
- 29. Security • ‘I got a new password for this application, lets put it on a post-it’ • ‘Lets use the same password everywhere’ • ..‘and put it on a post-it’
- 30. Security • ‘I got a new password for this application, lets put it on a post-it’ • ‘Lets use the same password everywhere’ • ..‘and put it on a post-it’ • ‘Just make everybody administrator so we don't have to think about roles for this system as well’
- 31. Security • ‘I got a new password for this application, lets put it on a post-it’ • ‘Lets use the same password everywhere’ • ..‘and put it on a post-it’ • ‘Just make everybody administrator so we don't have to think about roles for this system as well’
- 33. (App.) Administrators • ‘I don’t want to manage another application’
- 34. (App.) Administrators • ‘I don’t want to manage another application’ • ‘How will I keep user-accounts in sync with reality?’
- 35. Solutions
- 36. Solutions • Central user management
- 37. Solutions • Central user management • Single point of authentication and authorization
- 38. Solutions • Central user management • Single point of authentication and authorization • Integration of services (applications)
- 39. Solutions • Central user management • Single point of authentication and authorization • Integration of services (applications) • Self-service for end users
- 40. Solutions (LDAP)
- 41. Solutions (LDAP) • ‘Lightweight Directory Access Protocol’ • Active Directory (Microsoft) • OpenDJ (ForgeRock) • OpenLDAP (OpenLDAP foundation) • eDirectory (Novell) • Directory Server Enterprise (Oracle)
- 42. Solutions (LDAP)
- 43. Solutions (LDAP) • Central user management
- 44. Solutions (LDAP) • Central user management • Single point of authentication
- 45. Solutions (LDAP) • Central user management • Single point of authentication • Most (larger) companies already have one
- 46. Solutions (LDAP)
- 47. Solutions (LDAP)
- 57. Solutions (LDAP) LIFERAY LOGIN LDAP LOGIN PROFILE lastName: Janssen firstName: Piet email: p.j@comp.com
- 63. Solutions (SSO)
- 64. Solutions (SSO) • One account unlocks all
- 65. Solutions (SSO) • One account unlocks all • Self-service (profile page) for endusers
- 66. Solutions (SSO) • One account unlocks all • Self-service (profile page) for endusers • Policy management for connected systems
- 67. Solutions (SSO)
- 68. Solutions (SSO) • CAS (Yale University)
- 69. Solutions (SSO) • CAS (Yale University) • Shibboleth (Internet2)
- 70. Solutions (SSO) • CAS (Yale University) • Shibboleth (Internet2) • OpenAM (ForgeRock)
- 71. Solutions (SSO) • CAS (Yale University) • Shibboleth (Internet2) • OpenAM (ForgeRock) • Access Manager (Oracle)
- 72. Solutions (SSO) • CAS (Yale University) • Shibboleth (Internet2) • OpenAM (ForgeRock) • Access Manager (Oracle) • Facebook Connect
- 73. Solutions (SSO)
- 74. Solutions (SSO)
- 89. Solutions (SSO) OPENAM LDAPLIFERAY LOGIN lastName: Janssen firstName: Piet email: p.j@comp.com
- 90. Solutions (SSO) OPENAM LDAPLIFERAY lastName: Janssen firstName: Piet email: p.j@comp.com
- 93. Solutions (SSO) OPENAM LDAPLIFERAY lastName: Janssen firstName: Piet email: p.j@comp.com TOKEN
- 94. Solutions (SSO) OPENAM LDAPLIFERAY lastName: Janssen firstName: Piet email: p.j@comp.com
- 95. Solutions (SSO) OPENAM LDAPLIFERAY lastName: Janssen firstName: Piet email: p.j@comp.com
- 107. Solutions (SSO) OPENAM LDAPLIFERAY ERP lastName: Janssen firstName: Piet email: p.j@comp.com TOKEN
- 111. Benefits
- 112. Benefits • One password to rule them all
- 113. Benefits • One password to rule them all • Central role, policy and user management
- 114. Benefits • One password to rule them all • Central role, policy and user management • Integration of legacy functionality
- 115. Q(&A?) Sander Bilo sander@proteon.nl twitter: @sanderbilo +31 6 24458392