Our organization would like to have users authenticate against a different syste

Richard over 9 years ago

Our organization would like to have users authenticate against a different system than Appian (at this point we'd like SAML 2.0 integration, but will substitute SSO or LDAP for expediency) but with a twist...

We'd like to have the user account created on authentication, when there is no account.

We'd also like to have the user account updated with the latest information, when the account exists.

In both of these instances we'd like to retrieve the user details from an internal database. Anyone have advice, experience or sample code to offer?

Discussion posts and replies are publicly visible

Parents

0 darbyk
Certified Lead Developer
over 9 years ago

Hi Richard,
Another (potentially non-supported) option is to customize base product authentication files. Take a look at this post for an example of an individual doing this: forum.appian.com/.../e-99647
and this documentation page for more info:
forum.appian.com/.../Authentication.html
This user was able to set up SSO through OpenSSO (which can be configured to use SAML v2). Rather than setting up a redirect to a failure page when a user doesn't exist in Appian as mentioned in the post, you could potentially utilize Appian's API (forum.appian.com/.../) to create a user, then authenticate that new user.
This is a non-trivial solution so I'd recommend carefully considering this option.

Alternatively, you could integrate with LDAP and use that as your login, and then create a process in Appian that syncs with LDAP at a given interval to pull in all new users.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 darbyk
Certified Lead Developer
over 9 years ago

Hi Richard,
Another (potentially non-supported) option is to customize base product authentication files. Take a look at this post for an example of an individual doing this: forum.appian.com/.../e-99647
and this documentation page for more info:
forum.appian.com/.../Authentication.html
This user was able to set up SSO through OpenSSO (which can be configured to use SAML v2). Rather than setting up a redirect to a failure page when a user doesn't exist in Appian as mentioned in the post, you could potentially utilize Appian's API (forum.appian.com/.../) to create a user, then authenticate that new user.
This is a non-trivial solution so I'd recommend carefully considering this option.

Alternatively, you could integrate with LDAP and use that as your login, and then create a process in Appian that syncs with LDAP at a given interval to pull in all new users.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

No Data