Liferay DXP login through ADFS

RE: Liferay DXP login through ADFS

2020-02-14T20:46:58Z

Thanks David

RE: Liferay DXP login through ADFS

2020-02-13T21:03:42Z

There is plenty of documentation for using SAML with Liferay as the SP as well as with the IdP (although that is not what you need).

SAML is a standard and is about connecting pieces that conform to the standard, but that doesn't mean that every SP needs to or can document every possible SAML-based IdP solution.

You're going to have to do some work on this, Sree. Set up ADFS as a SAML IdP ala a page like this: https://support.zendesk.com/hc/en-us/articles/203663886-Setting-up-single-sign-on-using-Active-Directory-with-ADFS-and-SAML

Then connect Liferay as a SAML SP like this: https://help.liferay.com/hc/en-us/articles/360028711032-Authenticating-Using-SAML and https://help.liferay.com/hc/en-us/articles/360028711052-Setting-up-Liferay-DXP-as-a-SAML-Service-Provider

The rest is going to be on you.

RE: Liferay DXP login through ADFS

2020-02-13T19:50:45Z

thanks so much Jamie, your response give me a good idea to move on this integration.

RE: Liferay DXP login through ADFS

2020-02-13T19:39:55Z

Here is our documentation for configuring SAML2 with Liferay DXP: https://help.liferay.com/hc/en-us/articles/360028711032-Authenticating-Using-SAML

Unfortunately we don't have much experience with ADFS since it's a 3rd party integration. I did find a blog post that may help though: https://liferay.dev/blogs/-/blogs/adfs-liferay-dxp-integration

RE: Liferay DXP login through ADFS

2020-02-13T18:51:08Z

Chrish , Do I need to download saml2 in liferay and what configuration I have to do on liferay side ? and what we have to do on ADFS side ?

RE: Liferay DXP login through ADFS

2020-02-13T18:48:46Z

it seems Liferay does not have proper information about this, it's nightmare to Liferay customers

RE: Liferay DXP login through ADFS

2020-02-13T18:13:39Z

Sorry, I have never done this. I really can't tell you any steps/details.
You have to download the SAML2 module and then configure it. ADFS also should have some configuration page for SAML2. Maybe there are some general guides on ADFS/SAML2 that help you.

RE: Liferay DXP login through ADFS

2020-02-13T16:36:31Z

Chris, can you please let me details about that , I know about saml2. But let me know the details steps for ADFS & Liferay dxp

RE: Liferay DXP login through ADFS

2020-02-13T15:13:32Z

Yes, I understand. But to do that, you need to use SAML2.

RE: Liferay DXP login through ADFS

2020-02-13T14:35:50Z

Sorry, Sree, you and Christoph are right, I was quick-reading it and stopped at AD...

You'd need to use SAML for the SSO authentication using ADFS, but I don't think that is offered in CE.

There's no "native" ADFS authentication support in Liferay.

RE: Liferay DXP login through ADFS

2020-02-13T12:53:43Z

David, what ever you said is wrong, may be you did not understand my question.

RE: Liferay DXP login through ADFS

2020-02-13T12:53:12Z

Chris, I want to use IDP as ADFS , let's say If I hit Liferay protected resources then it has to route to ADFS url once my credential passed then that ADFS has to redirect to Liferay protected resource.

RE: Liferay DXP login through ADFS

2020-02-13T10:44:31Z

ADFS isn't AD, it is something different.
https://en.wikipedia.org/wiki/Active_Directory_Federation_Services

RE: Liferay DXP login through ADFS

2020-02-13T10:42:44Z

I never got to try it, but you should be able to use the SAML2 connector of DXP.
https://web.liferay.com/de/marketplace/-/mp/application/15188711
If you try it that way, I would be interested if that works without issues.

RE: Liferay DXP login through ADFS

2020-02-12T19:31:01Z

ADFS is nothing more than branded LDAP.

Follow the instructions to set up LDAP for authentication and you'll be all set.

Liferay DXP login through ADFS

2020-02-12T19:25:45Z

Hello, I want to do login Authentication through ADFS for Liferay DXP, Can you please provided instructions how to make that SSO implementation between ADFS & Liferay EE