Use this information to set up SSO with client certificates.
- Setup Apache as proxy server in front of Content Services and configure it to use SSL as described in Secure Sockets Layer (SSL) and the Repository.
- Activate external authentication as described in Configure external authentication.
-
To extend the SSL configuration in httpd.conf to request client authentication
and forward the user name as HTTP header, add this configuration to the
<VirtualHost>
node:
```bash SSLVerifyClient require SSLCACertificateFile /path/to/your/enterprise-CA.pem RequestHeader append X-Alfresco-Remote-User "%{SSL_CLIENT_S_DN_Email}e" ```This will accept all client certificates that have been signed by the CA identified by the certificate stored in enterprise-CE.pem. It will use the email address stored in this certificate as the user name.