User Management - Authorization - OKTA and AEM

Avatar

Avatar

samr99530769

Avatar

samr99530769

samr99530769

02-04-2017

Hi All,

We are using OKTA as IDP in our application.As per our current architecture we are not allowed to create user in AEM.I am facing some problem with authorization part.

I need some clarification as below.Please provide your valuable comments.

1)Is there a way to authorize the page or DAM assets without maintaining the user with in AEM.
2)What is the pros and cons of creating user with in AEM using SAML Handler.Will user sycing between the publisher will be a problem.
3)Is there a way to sync the user in OKTA to all AEM server at some regular time.Is there any OOTB tools are avilable.

Thanks,
Samba

Accepted Solutions (1)

Accepted Solutions (1)

Avatar

Avatar

MC_Stuff

Avatar

MC_Stuff

MC_Stuff

03-04-2017

Hi Samba, 

  1. AEM needs an user which is prerequsite for authentication to serve protected resources. .
  2. SAML means SSO and user will get created automatically if does not required. But it does not sync automatically between publishers. You need custom configuration using sling distribution to sync.  But it is not required unless you have requirement user home path should match. 
  3. Sync happens at user login time. In case you want periodic sync need custom implementation.

Thanks,

Answers (1)

Answers (1)

Avatar

Avatar

smacdonald2008

Total Posts

12.7K

Likes

1.4K

Correct Reply

2.3K

Avatar

smacdonald2008

Total Posts

12.7K

Likes

1.4K

Correct Reply

2.3K
smacdonald2008

03-04-2017

For more info about AEM and SAML - see this GEMS session:

https://docs.adobe.com/ddc/en/gems/saml-and-aem.html