You are viewing limited content. For full access, please sign in.

Question

Question

LF Webaccess Auto Login/API authentication

Laserfiche Web Client
Updated January 22, 2015
asked on January 20, 2015 • Show version history

Trying to insert the webaccess side of things to our internal website, so users in a particular group can view their files/folders using the webaccess interface without having to login.

 

Is there a way to send login packets/authentication via weburl or using api calls, so we could insert portion of the webaccess to website , using either iframe or some other means to display webaccess/folders/files. More like embedding webaccess.

 

Weblink is horrible and we like the look and feel of webaccess.

 

thanks

0 0

Replies

replied on January 20, 2015

You can configure Web Access to automatically log in using Windows authentication, which is the easiest way to accomplish what you want to do.

Alternatively, Web Access does support something we call a LoginModule, which is code you write that gets invoked during the authentication process.  Your code gets access to the ASP.Net Request object and you return to Web Access the credentials to use.  It is possible to have those credentials passed by URL, but obviously that's not very secure.

0 0
replied on January 20, 2015

I doubt iframes will pass windows authentication to the underlying frame. Plus would that loginmodule work with 9.2 if not mistaken LF took out profile based logins cause of "licensing" reasons. I be surprised if login module still works or is even allowed. It's a shame that profile based auto login option was scraped.

0 0
View 3 previous replies
replied on January 20, 2015

If the hosting page and the iframe are on the same trusted domain the browser should authenticate no problem.  Otherwise it might be trickier but it can be made to work.

The profiles feature of Web Access was dropped more because it doesn't really make sense in a named user licensing scheme.  If you have a use case where it would solve a problem I'd be interested in hearing more about it.

0 0
replied on January 21, 2015 • Show version history

Sure thing, we have a private members only section on our site and members/staff belong to a particular "committee/group". We want anyone in that committee to have access to this "web" based files/folders (no we do not want to directly send them to our webaccess site).

So example we have internal website our staff/members login and browse to a committees page (which not only has files/folders but also lots of other information and posts). On this page we have a "files" section which we want to link to LF server. If we had profiles we could have iframed the files/folder area from web access server.  Unless there is a different way of achieving access to LF files/folder within our internal staff website (without having to have them login twice or sent to different url), I am all ears. LoginModule seems like needs SDK (which we current do not have, maybe in the future).

 

What would you suggest Brian ? If we had profiles we could have iframed the web access to particular page/folder for individual committees with ease.

0 0
replied on January 21, 2015

Also, just realized after using the processlogin web url to pass/post the form that, the limit per session per user is set to 4. So if there are 10 users in committee LF will fail to login the 5th person. Now, makes me wonder if "profile" login back in 9.0 for webaccess also had the same limitation.

 

I am assuming there is no option to bypass that limit ? Few of the empower sessions talked about this hard limit even when doing SDK and authenticating using code. Correct me here if I understood it wrong ?

 

Cheers

0 0
replied on January 21, 2015

No, you're right.  That's what I meant about it not being compatible with a named user licensing scheme.  Those 10 users in the committee should each log in under their own account, which also helps with security and auditing.

The other strike against it is that there is no real security afforded by the scheme and we don't want to mislead anyone into thinking otherwise.  Besides Windows authentication, the two supported ways to log users in to Web Access without them providing credentials are the LoginModule (described above) and posting to ProcessLogin.aspx.

0 0
replied on January 22, 2015

So Brian, what if we wanted webaccess interface and look but functionality/licensing model of weblink (it's horrible looking), what options are available, is there no licensing for using webaccess as exists for weblink even just "read-only" license ?

0 0
replied on January 22, 2015

Public portal licensing is not available for Web Access.  The WebLink UI is very customizable, you can add/remove parts of the page and make changes to the style sheets.  Is there a particular part of it that you think you would have trouble changing?

0 0
You are not allowed to follow up in this post.

Sign in to reply to this post.

Details
Related Posts
Loading ...