3

We want to integrate "AFE (Ajax File Explorer) into our Drupal application. Our users are authenticated in Drupal and it is not possible for us to ask a second time there login/pwd while opening AFE.

We received a first answer from ITHIT:

Here is how to set login and password:

ajaxFileBrowser.GetSession().SetCredentials('User1', 'pwd');

Please note that this API sets password in XHR. Setting login and password in XHR does not provide any feedback on weather the login was successful. That is why in general I would suggest to rely on web browser login dialog which is displayed automatically instead of calling SetCredentials.

However it is not clear if it is a real and robust SSO solution. We discovered that Drupal has an webdav SSO module (https://github.com/Awnage/webdavsso), we will also investigate that part. But any comment/help welcomed.

Deduplicator
  • 44,692
  • 7
  • 66
  • 118
Christopher POTTER
  • 41
  • 1

2 Answers2

0

To my understanding there is no way to totally get rid of login dialog when using Basic, Digest, NTLM or Kerberos authentication with Microsoft Office.

Microsoft Office applications always ask for the authentication when used with Basic or Digest authentication. This is a Microsoft Office and Microsoft Mini-redirector limitation and there are no workaround in case your server is using Basic or Digest.

However, if you check "Remember my password" check-box it will still display the login dialog, but the user name and password will be already filled-in, so you just click "OK".

Here are some options to consider if you need to totally suppress login dialog with Microsoft Office:

  • Use NTLM or Kerberos authentication. In case of NTLM or Kerberos MS Office asks for credentials only 1 time during first document access.
  • Implement Office Forms Based Authentication Protocol (MS-OFBA).

  • Implement Url-authentiation. Your urls will look like: http://webdavserver.com/[SessionID1234567890]/path/file.docx.

    In case of Url-authentiation make sure you do not include the session ID in query string, Microsoft Office will truncate it. You will have to put session ID somewhere in the path, as in the above example, which is not very convenient, when you need to mount a WebDAV folder in you file system, but still works in most cases.

IT Hit WebDAV
  • 5,652
  • 12
  • 61
  • 98
  • There is a huge misunderstanding. We are not talking about a SSO with Office, but an SSO between a Drupal session and AFE. When you are logged in Drupal, you navigate to the AFE page and you don't have to authenticate a second time in AFE – Christopher POTTER Jul 25 '14 at 14:08
  • Christopher what what type of authentication your web application is using? Is it cookies, Basic, Digest, NTLM/Kerberos? – IT Hit WebDAV Jul 27 '14 at 10:33
0

Possible duplicate here Stackoverflow

I solved that problem in the same manner.

Community
  • 1
  • 1
Kassav'
  • 1,130
  • 9
  • 29