This module enables external authentication using UM-SSO mechanism. In the core, the Context component provides with an interface that allows using HTTP headers present in the HHTP context to authenticate the user. Associated with a set of rules, the Authentication is able to establish a protocol to authenticate user.
Next “Code ruleset” is the excerpt of the ruleset configured to enable UM-SSO authentication. The externalAuthentication is declared with the method UM-SSO. accountType maps the rule to an account. The rule is applied only if the condition that specified that the header is present and not empty. Then the value present in is used as login username and user is registered automatically if not yet present in the database with register=”true” and the user receives a account creation mail with the mail information found in header Umsso-Person-Email.
Following diagram depicts the User status when logging with UM-SSO.
Next diagram depicts the scenarios that applies when a user perform an HTTP request to a web service protected by UM-SSO. This scenario is the “normal” case where user credentials are correct.
