1. Home
  2. Development
  3. Custom Authentication

Custom Authentication

thumbnail
Hamidul Islam, modified 6 Years ago.
Custom Authentication
Regular Member Posts: 111 Join Date: 5/22/08 Recent Posts

Hi All,

For my current project I need to validate user in the external system with a custom login portlet. The external system validate the user using rest API call. Once the user is validated it returns authentication(some string) token and the user should be able to login Liferay without using liferay`s deafult authentication.

 

I want to handle this situation in such way that it should not distrub liferay`s default sign in portlet authentication flow. Because in my same Portal I have different applications which are using default sign in portlet.

 

My Environment : Liferay 7 DXP, Tomcat

 

Thanks

Hamidul Islam

thumbnail
David H Nebinger, modified 6 Years ago.
RE: Custom Authentication
Liferay Legend Posts: 14933 Join Date: 9/2/06 Recent Posts

"I want to log them in externally and it should not affect the normal Liferay process, but I also want the normal Liferay process"?

Liferay has support via the authentication pipeline to support creating an external login. Normally we use this path to integrate with external authentication mechanisms.  You don't need a separate login portlet using the pipeline because all roads get the user into Liferay. Since all users must be real Liferay users anyway, this authentication pipeline allows for easy integration w/ the external systems.

Now if you are asking to use the external auth mechanism but not have the folks be Liferay users, well that is just not possible.  All authenticated users must be Liferay users.