Sun IDM and Alfresco: Just Married
Monday, February 23rd, 2009 by Enrico
I’ve been so busy on my current project that I haven’t found the time to mention this until now but something cool was brewing in the Tenthline office just a month or so ago. We’ve developed a Sun IDM resource adapter that can create and delete accounts on a remote Alfresco server. It was a bit of an involved process because Alfresco’s API for user accounts doesn’t handle all of the auxiliary operations that the JSF client performs such as creating a space for the new user.
So here’s how it all works:
- We’ve developed a set of Java-backed Alfresco web scripts that can perform proper provisioning and deprovisioning of users. These must be installed and accessible on the remote Alfresco server from the IDM server.
- We’ve developed a custom resource adapter for IDM which must be deployed on the IDM server. An IDM admin can then create an Alfresco resource.
- When a user is assigned to the Alfresco resource, that user’s account ID, first name, last name, and e-mail address are used by IDM to call the provisioning web script and create a new Alfresco user.
- When an admin wants to remove a user from the Alfresco resource, IDM makes a call to the deprovisioning web script with that user’s Alfresco account ID.
As you can see, it’s a really basic integration right now but it could be made to do a lot more. We’re interested in hearing your thoughts on how this can be made even cooler.
If you’d like to see a basic demo, get in touch with Zahid (his name @ tenthline.com) and he should be able to set something up.
Here’s to hoping that this beautiful marriage lasts and bears delicious fruit! =)
Tags: Alfresco, Identity Management, IDM, integration, provisioning, Tenthline