Difference between revisions of "Ajcody-External-Authentication"

m
m
Line 44: Line 44:
 
* "zimbra.web.xml.in adjusted to handle customizations (CAS)"
 
* "zimbra.web.xml.in adjusted to handle customizations (CAS)"
 
** http://bugzilla.zimbra.com/show_bug.cgi?id=32077
 
** http://bugzilla.zimbra.com/show_bug.cgi?id=32077
 +
 +
[[Category: Community Sandbox]]

Revision as of 23:15, 16 November 2008

Template:NotOfficial

External Authentication

Actual External Authentication Homepage

Please see Ajcody-External-Authentication

General Topics

Zimbra supports the ability to use an external authentication source, but we don't support the external authentication servers setup and configuration.

Please see the following for more details:

http://wiki.zimbra.com/index.php?title=LDAP_Authentication

http://wiki.zimbra.com/index.php?title=LDAP

You can also use the forums to see if others have worked out some good instructions when working with your particular external authentication server.

http://www.zimbra.com/forums/

Another possibility is the use of Preauth, see:

http://wiki.zimbra.com/index.php?title=Preauth

SSO with Sun IAM - Identity And Access Manager

There is no Access Manager Policy Agent for Jetty Application Server [Oct 21, 2008]. We suggest the following.

  1. Build a webpage that is protected by Sun Java Access Manager. Presumably this would be an apache tomcat served page so that SJAM would be able to manage it with its existing policy agent for apache tomcat. This page would interact with SJAM to get access checks and then use the standard Zimbra pre-auth mechanism to pre-auth the user and bounce them into the zimbra app.
  2. In Zimbra, you would configure (on the domain) zimbraWebClientLoginURL (and zimbraWebClientLogoutURL), to the address of that apache tomcat served webpage from step 1 above. If someone attempts to login to zimbra directly, they would be redirected to the page which is controlled by SJAM. And when logging out, they would be again redirected to the webpage that is controlled by SJAM. There would be no way to log into or out of Zimbra without the approval and control of SJAM.

For details on the preauth mechanism, see:

JA-SIG Central Authentication Service Or CAS

CAS is an authentication system originally created by Yale University to provide a trusted way for an application to authenticate a user. CAS became a JA-SIG project in December 2004.

Jump to: navigation, search