You can find all the documentation here.

So here are steps:

• create you nuxeo plugin project (from IDE, it's easy)
• create a new component to contribute your LoginPlugin (if the user identity validation is not default one - see the documentation above)
• create a new component to contribute your authenticator (and refer your loginModule if required)
• implement your authenticator class
• Create your authentication chain
• There is also the user management configuration. If you are using other thing that LDAP or SQL repository, you will have to define your user manager.

If you use a LDAP or a SQL table for user management, you will just have to:

• declare directories. See this documentation.
• and bind this directory into the default user management.

Hi,

All the documentation links mentioned above were archived and are no longer accessible. Equivalent links to the latest Nuxeo Platform version are:

• https://doc.nuxeo.com/nxdoc/authentication-and-user-management/
  

• https://doc.nuxeo.com/nxdoc/using-a-ldap-directory/
  

• https://doc.nuxeo.com/nxdoc/data-lists-and-directories/
  

• https://doc.nuxeo.com/nxdoc/using-a-ldap-directory/
  

You can use the toggle version to browse to previous versions or browse the PDF of archived versions.

Thanks,

Manon

Hi Benjamin, I work with DLovat who posted this question.

In the document, http://doc.nuxeo.com/display/NXDOC/Authentication it mentions the following: “Additional Authentication Plugins Nuxeo provides a set of other authentication plugins that are not installed by default with the standard Nuxeo EP setup. These plugins can be downloaded and installed separately.”

Could you please provide me some links where I can download these additional plugins? I would like to get their code so that I can step through them and understand how they work.

We use a similar configuration, with mod_proxy_sso, here is our config file. You'll notice 3 extensions. For Nuxeo 5.5. Hope this helps you figure it out.

    <component name="local.mod_sso">
    <require>org.nuxeo.ecm.platform.ui.web.auth.defaultConfig</require>
    <require>org.nuxeo.ecm.platform.ui.web.auth.WebEngineConfig</require>
    <require>org.nuxeo.ecm.automation.server.auth.config</require>
    <require>org.nuxeo.ecm.platform.login.Proxy</require>
    <extension
        target="org.nuxeo.ecm.platform.ui.web.auth.service.PluggableAuthenticationService"
        point="authenticators">
        <authenticationPlugin name="PROXY_AUTH">
            <loginModulePlugin>Trusting_LM</loginModulePlugin>
            <parameters>
                <parameter name="ssoHeaderName">REMOTE_USER</parameter>
            </parameters>
        </authenticationPlugin>
    </extension>
    <!-- Override Proxy Auth into authentication chain -->
    <extension
        target="org.nuxeo.ecm.platform.ui.web.auth.service.PluggableAuthenticationService"
        point="chain">
        <authenticationChain>
            <!-- Keep basic Auth at top of Auth chain to support RSS access via BasicAuth -->
            <plugins>
                <plugin>BASIC_AUTH</plugin>
                <plugin>FORM_AUTH</plugin>
                <plugin>WEBENGINE_FORM_AUTH</plugin>
                <plugin>ANONYMOUS_AUTH</plugin>
                <plugin>WEBSERVICES_AUTH</plugin>
                <plugin>PROXY_AUTH</plugin>
            </plugins>
        </authenticationChain>
    </extension>
    <extension
        target="org.nuxeo.ecm.platform.ui.web.auth.service.PluggableAuthenticationService"
        point="specificChains">
        <specificAuthenticationChain name="Automation">
            <urlPatterns>
                <url>(.*)/automation.*</url>
            </urlPatterns>
            <replacementChain>
                <plugin>AUTOMATION_BASIC_AUTH</plugin>
                <plugin>ANONYMOUS_AUTH</plugin>
                <plugin>PROXY_AUTH</plugin>
            </replacementChain>
        </specificAuthenticationChain>
    </extension>
</component>

Hi,

Have you looked at the different login plugins that already exists? Maybe you'll find one that suits you. If not, most of them also have a sample folder.