Passing authentication

[Eusebio]

Hi,

We use Orbeon Forms (Tomcat) currently, however it is a standalone system
and the forms are filled in without any authentication of the user. They are
just given the public URL of the /new form and then it is filled in a
submitted. The /edit and /summary is locked to authorised access only.

We have another platform (.NET) which our users login to in order to do
tasks which are related to the forms. What we would like to do is have the
user login to our .NET platform and authenticate. Once they are inside they
would go to a specific project and browse the related files and links. One
of these links would be to the Orbeon Forms server. Ideally we would like to
use the .NET credentials to then authenticate them on the Orbeon system so
that when they follow the link it knows who they are in Orbeon and puts the
user into the form data when saved. This would mean that we can then have a
user edit an existing form or edit a draft.

We don't want to have a login form for the forms system separately, it
should only be accessed via the .NET platform.

I've read through the documentation but I can't seem to piece everything
together to achieve what we are trying to do.

1. Do I setup a tomcat group called something like 'sql_users' in the
tomcat-users.xml and then in the web.xml
2. Where do I set the 'sql-users' group to be related to the .NET SQL DB
user table.
3. Is there something with tokens I should be doing?

Thank you in advance for any guidance that can be offered.

Eusebio

--
View this message in context: http://discuss.orbeon.com/Passing-authentication-tp4662126.html
Sent from the Orbeon Forms community mailing list mailing list archive at Nabble.com.

[bruno.buzzi]

Hi,

We have a similar requirement but our application is not .NET. Here there is
information how to integrate a Web Application with Orbeon using tokens:
https://brunobuzzi.gitbooks.io/bpm-using-orbeon-and-gemstone-s/content/seaside_orbeon_integration.html

Diagram:
https://brunobuzzi.gitbooks.io/bpm-using-orbeon-and-gemstone-s/content/gemstone_to_orbeon.html

Basically:
1- Generate a token (UUID) in .NET and associate the UUID with a XML (with
user information, name, roles, etc).
2- Redirect to Orbeon Form passing the UUID as url parameter.
3- Configure Orbeon Form to take that parameter and callback (passing the
UUID to) a web service in your Application.
4- The web service do a lookup with the UUID to get the XML and answer the
XML.
5- Orbeon get the XML result and display values in read only fields.

In the link above is a round trip betweeb both applications.
Web App --> Orbeon, after the user save --> Orbeon --> Web App.

regards,
bruno

--
View this message in context: http://discuss.orbeon.com/Passing-authentication-tp4662126p4662127.html