Alfresco Digital Workspace only requires its properties to be updated to enable SSO. For manual deployments these can be updated in the app.config.json file and for Docker and Kubernetes deployments using environment variables.
| Property | Environment variable | Description |
| authType | APPCONFIGAUTH_TYPE | The authentication type. Must be set to OAUTH |
| host | APPCONFIGOAUTH2_HOST | The address of the Identity Service including the realm name configured in step 1. In the example the realm name is Alfresco |
| clientId | APPCONFIGOAUTH2_CLIENTID | The name of the client configured in step 1 for Digital Workspace |
| implicitFlow | APPCONFIGOAUTH2IMPLICITFLOW | |
| silentLogin | APPCONFIGOAUTH2SILENTLOGIN | Setting silentLogin to true removes a login page from displaying if a user is already authenticated. Setting the value to false will display a sign in page even though a user needs to only select the Sign in option and not enter any credentials |
| redirectSilentIframeUri | APPCONFIGOAUTH2REDIRECTSILENTIFRAMEURI | The address that Digital Workspace uses to refresh authorization tokens |
| redirectUri | APPCONFIGOAUTH2REDIRECTLOGIN | The URL to redirect to after a user is successfully authenticated |
| redirectUriLogout | APPCONFIGOAUTH2REDIRECTLOGOUT | The URL to redirect to after a user successfully signs out |
Note
If implicitFlow is set to false the grant type password will be used instead.
The following is an example app.config.json file excerpt. By default this file is located in the /src directory.
"authType": "OAUTH",
"oauth2": {
"host": "https://ids.example.com/auth/realms/alfresco",
"clientId": "alfresco",
"scope": "openid",
"secret": "",
"implicitFlow": true,
"silentLogin": true,
"redirectSilentIframeUri": "https://adw.example.com/workspace/assets/silent-refresh.html",
"redirectUri": "/workspace/",
"redirectUriLogout": "/workspace/logout"
}