Uploaded image for project: 'Alfresco One Platform'
  1. Alfresco One Platform
  2. ACE-5980

Unable to edit file in Microsoft Office using SAML

    Details

    • Bug Priority:
      Category 1

      Description

      Preconditions:

      1. Either PingFederate or ADFs can be used, the bug is reproducing with both of them;
      2. Share service provider configured with saml enabled and enforced and AOS service provider configured with saml enabled;
      3. UserA is logged;
      4. Site with MS word documents in the document library created in Alfresco Share;

      Steps to reproduce:

      1. Log into Alfresco Share using IdP log in page and valid user credentials;
      2. Open the word document from the preconditions and select Edit in Microsoft Office option;

      Expected result:
      Microsoft Word is opened with browser displaying IdP login page.

      Actual result:
      Microsoft Word is opened with an error message displayed. (please see the attached files: actual_result.zip,  actual_result.png)

       

      Notes:

      • project used: https://git.alfresco.com/PRR/saml-docker-env/tree/6.1.1-adfs
      • for PingFederate the following properties were used for Share and AOS:
        saml.sp.isEnabled=true
        saml.sp.isEnforced=true
        saml.sp.idp.description=PingFederateSp
        saml.sp.idp.sso.request.url=https://pingfederate.alfresco.me:9031/idp/SSO.saml2
        saml.sp.idp.slo.request.url=https://pingfederate.alfresco.me:9031/idp/SLO.saml2
        saml.sp.idp.slo.response.url=https://pingfederate.alfresco.me:9031/idp/SLO.saml2
        saml.sp.user.mapping.id=PersonImmutableID
        saml.sp.idp.certificatePath=ALFRESCOPATH\DF6CB291127763616C1142CEB5C859E.crt
        • Share: saml.sp.idp.spIssuer= localhost.https.share and localhost.share
        • AOS: saml.sp.idp.spIssuer= localhost.repository.https and localhost.https.repository
      • Used saml.sp.idp.spIssuer for ADFS:
      • Alfresco Enterprise v6.1.1
        (RC1 r166cecc5-b141) schema 12001
      • Used amps:
        • alfresco-aos-module (version 1.2.2)
        • alfresco-saml-repo (version 1.1.1)
        • org.alfresco.integrations.google.docs (version 3.1.0)
        • org_alfresco_device_sync_repo (version 3.1.2-RC2)
        • alfresco-share-services (version 6.1.0)
        • alfresco-trashcan-cleaner (version 2.3)
      • Tryin to access https://localhost:8443/alfresco/service/saml/-default-/aos/authenticate message received is "You have been authenticated."

        Attachments

        1. actual_result.png
          actual_result.png
          35 kB
        2. actual_result.zip
          5.98 MB
        3. aos_map_network_drive.png
          aos_map_network_drive.png
          59 kB
        4. aos_without_saml.png
          aos_without_saml.png
          26 kB

          Issue Links

            Structure

              Activity

                People

                • Assignee:
                  closedissues Closed Issues
                  Reporter:
                  iburca Iulia Burca
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  7 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved:

                    Structure Helper Panel