It might also be worth taking a look at the Microsoft Azure AD Integration 
guide [1] for general guidance on integrating with a Java app.

Sample code is included.

Jason

[1] 
https://docs.microsoft.com/en-us/samples/azure-samples/active-directory-java-webapp-openidconnect/integrating-azure-ad-into-a-java-web-application/

On 25/03/2020 10:28, Jacques Le Roux wrote:
Hi Vipin,

I don't know anything about Azure SSO and the documentation is sparse.

It's based on a federation like SAML[2], but according to [1] it has not been 
tested with SAML.
If it was you could have used Shibboleth[3]. You could try at your own risk 
(spend money for nothing), nothing is guaranteed. It seems only commercial 
products have been tested.

So I have no ideas about it and that's all I can say.

This said how do you call OFBiz? If you use simple URLs you could use a 
degraded mode where you send the parameters in the URL like:

webtools/control/login?USERNAME=admin&PASSWORD=ofbiz&JavaScriptEnabled=Y

Of course it's not recommended because unsafe (can be intercept by a Man in the 
Middle). But if your are in a safe network, why not?

[1] https://www.microsoft.com/en-us/download/details.aspx?id=56843
[2] https://en.wikipedia.org/wiki/Security_Assertion_Markup_Language
[3] https://en.wikipedia.org/wiki/Shibboleth_(Shibboleth_Consortium)

Jacques

Le 23/03/2020 à 11:14, vipin nirwal a écrit :
Hi All,

I have to integrate ofbiz with Azure Active Directory SSO.

Requirement: I have a portal for users which is integrated with Azure SSO.
When a call is being made to ofbiz from my portal, then i do not want to
pass ofbiz username/password in that call, even i want to use the SSO only. Is
there a tighter integration that ofbiz can have with an SSO so that a user
may get authenticated directly without using an ofbiz user?

Please let me know , how can i achieve this?


Thank you in advance.

Reply via email to