SSO and Web Services

All the examples I have seen involve providing a User ID an Password for authentication. Is it possible to retrieve an authentication token from a system service (in .Net) that is acceptable to ECM? We have users that are authenticated to Active Directory when they log in and ECM is integrated with AD.

Find more posts tagged with

Comments

eLink User

I have been able to successfully do this under these conditions

The livelink server has Oscript Dir Svcs (CSDS) code module installed and that livelink uses IWA for authentication.In short a web gui attempt does not ask you for a userid/password.You can see if REMOTE_USER comes into livelink by using the RH ?func=admin.testargs(that is your friend in debugging) this is a must for seamless authentication.In such a livelink SSO webservices are possible.

Most new CS10 update 9 plus wants you to use OTDS for authentication which is basically you will have to ask for the AD ticket using this OTDS system.I have never done that.A while back a OT expert said that instead of asking for the ot authentication svc you would be asking this Tomcat/RCS thing for the ticket.

In my blog I have described my setup in case you can't make this work if you post all relevant details I will try to see where you are going wrong.Most newer webservices updates are making seamless log on more and more easier

I do not work for OT so my attempts are just that

http://appukili.wordpress.com/2013/02/16/single-sign-on-and-content-web-services-update/

..Appu

1 Use Share Point, 2 Use Web Report, 3 Use Spread Sheet

On Wed, Sep 11, 2013 at 2:55 PM, eLink Entry: Content Web Services Forum <otdncontentwebservices971forum@elinkkc.opentext.com> wrote:

SSO and Web Services Posted bypaul.billinger@brucepower.com (billinger, paul)On 09-11-2013 15:49

All the examples I have seen involve providing a User ID an Password for authentication. Is it possible to retrieve an authentication token from a system service (in .Net) that is acceptable to ECM? We have users that are authenticated to Active Directory when they log in and ECM is integrated with AD.
[To post a comment, use the normal reply function]
Forum: Content Web Services Forum
Content Server: Knowledge Center

Guy_Pomerleau

Are you using Livelink directory services or OTDS? Yes it is possible to use the window authentication. We are doing it. You need to change your web.config for your lesservices virtual folder. There is already some post about web.config mofification for web services authenticated.

here some sample code we use to list document in a folder:

LLDocument.OTAuthentication Auth = new LLDocument.OTAuthentication();
              Auth = new LLDocument.OTAuthentication();
              LLDocument.DocumentManagementClient LLDoc = new LLDocument.DocumentManagementClient();
   foreach (Int32 folderId in folderIds)
   {
    LLDocument.Node[] nodes = LLDoc.ListNodes(Auth, folderId, true);
    if (nodes != null)
    {
     foreach (LLDocument.Node node in nodes)
     {
      if (!node.IsContainer)
       documentToReturn.Add(new LiveLinkDocument { Id = node.ID, Name = node.Name, Description = node.Comment });
     }
    }
   }
  return documentToReturn;