User Management - Authorization - OKTA and AEM | Community
Skip to main content
S
samr99530769
New Participant
April 3, 2017
Solved

User Management - Authorization - OKTA and AEM

  • April 3, 2017
  • 2 replies
  • 2903 views

Hi All,

We are using OKTA as IDP in our application.As per our current architecture we are not allowed to create user in AEM.I am facing some problem with authorization part.

I need some clarification as below.Please provide your valuable comments.

1)Is there a way to authorize the page or DAM assets without maintaining the user with in AEM.
2)What is the pros and cons of creating user with in AEM using SAML Handler.Will user sycing between the publisher will be a problem.
3)Is there a way to sync the user in OKTA to all AEM server at some regular time.Is there any OOTB tools are avilable.

Thanks,
Samba

    This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
    Best answer by MC_Stuff

    Hi Samba, 

    1. AEM needs an user which is prerequsite for authentication to serve protected resources. .
    2. SAML means SSO and user will get created automatically if does not required. But it does not sync automatically between publishers. You need custom configuration using sling distribution to sync.  But it is not required unless you have requirement user home path should match. 
    3. Sync happens at user login time. In case you want periodic sync need custom implementation.

    Thanks,

    2 replies

    smacdonald2008
    smacdonald2008
    New Participant
    April 3, 2017

    For more info about AEM and SAML - see this GEMS session:

    https://docs.adobe.com/ddc/en/gems/saml-and-aem.html

      MC_Stuff
      MC_StuffAccepted solution
      New Participant
      April 3, 2017

      Hi Samba, 

      1. AEM needs an user which is prerequsite for authentication to serve protected resources. .
      2. SAML means SSO and user will get created automatically if does not required. But it does not sync automatically between publishers. You need custom configuration using sling distribution to sync.  But it is not required unless you have requirement user home path should match. 
      3. Sync happens at user login time. In case you want periodic sync need custom implementation.

      Thanks,

      Terms & ConditionsAccessibility statement

      Loading footer...