Single Sign-on feature in Activiti 6.0

[ravisankar]

We need the single sign-on feature to access the activiti-app from our internal UI application.
Currently we are using Activiti 5.22.0 and planning to migrate to Activiti 6.0. So, would like to know the single-signon feasibility in Activiti 6.0 and get more information about single sign-on implementation. Can someone who already implemented the activiti single sign-on (in 6.0), please provide the implementation guidelines?

[salaboy]

Hi Ravi,

We are working on Activiti 7 which includes integration with Keycloak for SSO and Identity Management. We are working hard to get Activiti 7 Beta 1 out in the following weeks, so I would recommend you to take a look at our latest blog posts and see if you can skip 6. The new architecture design is more suited for Cloud Deployments, but you can leverage the new stuff in different architectures as well. 

Hope this helps

[ravisankar]

Thanks Mauricio for your response. Currently we are using Activiti 5.22.0 and we didn't implement the single sign-on feature in our application yet.

Now we are trying to migrate it to Activiti 6.0 and would like to implement the single sign-on feature on top of Activiti 6.0.

The reason we want to use Activiti 6.0 is that "activiti-admin" and "activiti-app" UI applications would be really helpful to the users for managing the tasks.

So, could you please provide your suggestions on the below questions?

1. Can someone who already implemented the activiti single sign-on (in 6.0), please provide the implementation guidelines?

2. In future - once we complete the migration to Activiti 6.0 with SSO, how hard it would be to do the upgrade to Activiti 7 ?

[salaboy]

Some answers to your questions:

1) probably yes, but I don't have any public reference to it, it really depends on how to use it.. I'm guessing that you want to integrate SSO to the activiti-app and the activiti-admin app? What is your use case exactly? 

2) It will be hard.. if you don't follow a similar approach. The main reason why we are not spending time to do that in 6 is because when you deal with microservices SSO is a must, but when you move to microservices there are lot of other changes that needs to happen in order to make the entire solution easy to use and resilient. 

Hope this helps.. 

[ravisankar]

Hi Mauricio,
We want to integrate the SSO feature to access the activiti-app from our internal UI application and we don't need SSO for activiti-admin.

[salaboy]

Ok, but what SSO provider are you using then?