Dear All,
After keeping searching for a while why the Azure Connect is not working (the button is not showed anymore) in Axelor version 8+.
Straight answer: Security :: Axelor Documentation
Detailled answer:
Axelor is using : PAC4J
In version, 7+, there still a file login.jsp in the root folder (war) and this file contains :
Meaning is importing the dependency in order to permit « indirect » authentication.
And if you fill configuration related to Azure in application.properties, like this:
We can verify that in the logs on Axelor booting:
And on the login page you will have a « Connect with Azure ».
But in the version 8 + this file login.jsp is not existing anymore (it seems that the dev team dropped support of JSP).
The mechanism is different and even if you had filled the application.properties in the same way the button « Connect with Azure » won’t appear.
You can see in the logs that the dependency is no loaded while Axelor boot:
It seems that feature is now inside a .jar from WEB-INF/lib folder:
This jar is containg a class : AuthPac4jInfo.class that may still load the dependency
You can extract it like this:
mkdir /tmp/pac4j-classes
cd /tmp/pac4j-classes
for jar in PATH_TO_AXELOR_EXTRACTED_WAR_FOLDER/WEB-INF/lib/axelor-base-8.4.10.jar \
PATH_TO_AXELOR_EXTRACTED_WAR_FOLDER/WEB-INF/lib/axelor-core-7.4.3.jar; do
jar xf "$jar"
done
find . -type f | grep AuthPac4jInfo
If you define auth.local.basic-auth = indirect
In the Axelor boot logs you will see:
So it may means that the dependency PAC4J may still loaded through this .jar
I did not went further than this, but we may miss a « front page » that would « show » the Azure OpenIDConnect.
Maybe this page is provided in the paid version.
Is now SSO feature behind a paywall?
Business over security is a topic that everyone would have their own opinion.