Hi, new to the Plone community so I apologize if there is an obvious answer to this question.
We are looking to utilize Plone to replace some business enterprise applications, In order to do that we need to be able to authenticate our users with Azure AD instead of the typical Plone authentication. Now I'm sure we could do that on the front end with MSAL.js but we really need to be able to tie the user accounts in with the workflows, e.g. so that Person@OurDomain.com is responsible for moving a workflow from one state to the next.
Could someone give me an idea of what all is involved in setting that up and point me to any resources out there that may help with that?
Not sure if it matters or not but we are looking to use Volto as well.
To connect to your AD/LDAP I would recommend using:
When you need SSO in a windows environment this might be worth a shot (though, this does not work with the latest Plone versions and would require an update):
When it comes to auth, there is nothing special about Volto here. This is handled by the backend in any case and Volto just does the initial authentication via the login form (as Plone classic via the ZPT form).
One more (hopefully) quick question, in the setup for pas.plugins.ldap it says
Run buildout. Restart Plone.
Then go to the Plone control-panel, select extensions and install the LDAP Plugin.
A new LDAP Settings icon appear on the left. Click it and configure the plugin there.
To use an own integration-profile, add to the profiles metadata.xml file:
Is the Plone control-panel it's referencing supposed to be /Plone/@@overview-controlpanel or Control_Panel/manage_main, either way I'm not seeing an option to do the install, this is my buildout.cfg
[buildout]
# use this extend one of the buildout configuration:
extends =
# -*- mrbob: extra extends -*-
# test_plone43.cfg
# test_plone50.cfg
# test_plone51.cfg
test_plone52.cfg
eggs =
plone.restapi
pas.plugins.ldap
zcml =
pas.plugins.ldap
You need to run "bin/buildout" first after you amended the buildout.cfg. Then start the instance and then you should see the add-on in the add-ons control panel.
