Liferay

Presentation

Liferay is an enterprise portal.

Liferay can use LL::NG as an SSO provider but you have to manage how users are created:

By hand in Liferay administration screens
Imported from an LDAP directory

Of course, integration will be full if you use the LDAP directory as users backend for LL::NG and Liferay.

If the user is not created, or can not be created via LDAP import, the connection to Liferay will be refused. With LDAP, login, mail, first name and last name are required attributes. If one is missing, the user is not created.

This documentation just explains how to set up the SSO part. Please refer to Liferay documentation to enable LDAP provisionning.

Configuration

Liferay administration

Access to Liferay (first time):

Go to My Account:

Go to Portal » Settings:

Go to Configuration » Authentication:

In General, fill at least the following information:

How do users authenticate?: by login

We advice to deactivate other options, cause users will use LL::NG portal to modify or reset their password.

You need to activate LDAP authentication, else SSO authentication will not work. Do this in the control panel or in the configuration file:

ldap.auth.enabled=true

Then use the SiteMinder tab to configure SSO:

Enabled: Yes
Import from LDAP: Yes (see presentation)
User Header: Auth-User (case sensitive)

Do not forget to save your changes!

Liferay virtual host in Apache

Configure Liferay virtual host like other protected virtual host.

<VirtualHost *:80>
       ServerName liferay.example.com
 
       PerlHeaderParserHandler My::Package
 
       ...
 
</VirtualHost>

Liferay virtual host in Manager

Go to the Manager and create a new virtual host for Liferay.

Just configure the access rules. You can add a rule for logout:

 ^/c/portal/logout => logout_sso

Configure the Auth-User header.