[DOCS-7691] Add Alfresco Content Services 7.2.2 docs (#1482)

* [DOCS-7691] Add Alfresco Content Services 7.2.2 docs * [DOCS-7683] Add Keycloak compatibility and configuration for ACS 7.2.2 (#1484) * [DOCS-7683] Add Keycloak compatibility and configuration for ACS 7.2.2 * [DOCS-7691] Add suggestions * [DOCS-7706] Update ACS 7.2.2 Supported Platforms for Alfresco Transform Service 4.1.2 (#1497) * [DOCS-7710][DOCS-7723] Add & update compatibility in ACS 7.2 (#1501) * [DOCS-7710] Add Alfresco Desktop Sync 1.18 to ACS 7.2 * [DOCS-7723] Update Sync Service 3.11.3 compatibility to ACS 7.2 * [DOCS-7708] Add Intelligence Services 3.1.3 compatibility to ACS 7.2 * [DOCS-7726] Add Keycloak Tutorial to ACS 7.2 (#1503) * [DOCS-7726] Add Keycloak Tutorial to ACS 7.2 --------- Co-authored-by: Adelaide Nxumalo <[email protected]> * [DOCS-7691] Add link to property * [DOCS-7691] Fix link * [DOCS-7691] Fix link * [DOCS-7691] Fix link * [DOCS-7691] UA review - fix headings, anchors, and spaces * [DOCS-7691] Fix anchor to LDAP Step-5 --------- Co-authored-by: Monika Rutkowska <[email protected]> Co-authored-by: Adelaide Nxumalo <[email protected]>
Alfresco · May 30, 2024 · 3dcf49f · 3dcf49f
1 parent 5d8ed3e
commit 3dcf49f
Show file tree

Hide file tree

Showing 7 changed files with 1,229 additions and 2 deletions.
diff --git a/_data/toc/content-services-tutorial.yaml b/_data/toc/content-services-tutorial.yaml
@@ -191,6 +191,16 @@
           path: '/content-services/7.2/tutorial/model/'
         - title: 'Configure Smart Folders'
           path: '/content-services/7.2/tutorial/smart/'
+        - title: 'Configure Keycloak'
+          pages:
+            - title: 'Single Sign On Guide'
+              path: '/content-services/7.2/tutorial/sso/'
+            - title: 'SAML'
+              path: '/content-services/7.2/tutorial/sso/saml/'
+            - title: 'LDAP'
+              path: '/content-services/7.2/tutorial/sso/ldap/'   
+            - title: 'Kerberos'
+              path: '/content-services/7.2/tutorial/sso/kerberos/'
         - title: 'Videos'
           pages:
             - title: 'Alfresco Share videos'

diff --git a/content-services/7.2/admin/auth-sync.md b/content-services/7.2/admin/auth-sync.md
@@ -1451,7 +1451,7 @@ Use this information to configure Content Services to authenticate using Identit
 
 Configure the `alfresco-global.properties` file using the below properties:
 
-> **Note:** See the Keycloak documentation for a [full list of possible properties](https://www.keycloak.org/docs/4.8/securing_apps/index.html#_java_adapter_config).
+> **Note:** See the Keycloak documentation for a [full list of possible properties](https://www.keycloak.org/docs/latest/securing_apps/index.html#_java_adapter_config).
 
 | Property | Description |
 | -------- | ----------- |
@@ -1467,6 +1467,17 @@ Configure the `alfresco-global.properties` file using the below properties:
 | identity-service.resource | The **Client ID** for the client created within your realm that points to Content Services. The default value  is `alfresco`. |
 | identity-service.public-client | The adapter won't send credentials for the client to the Identity Service if this is set to `true`. The default value  is `true`. |
 
+#### Enable configuration for Keycloak
+
+For Keycloak compatibility, you must set `Exclude Issuer from Authentication Response` to `On`.
+
+1. Log in to the Keycloak Admin Console.
+2. Select the **alfresco** realm.
+3. Navigate to the **Clients** section.
+4. Select the client that is used by Share according to the `aims.resource` property. For more information, see [Configure authentication]({% link content-services/7.2/tutorial/sso/ldap.md %}#step-5-configure-alfresco-share-properties).
+5. Select the **Advanced** tab.
+6. Enable **Exclude Issuer from Authentication Response** and click **Save**. 
+
 ## Configure synchronization
 
 The synchronization subsystem manages the synchronization of Content Services with all the user

diff --git a/content-services/7.2/support/index.md b/content-services/7.2/support/index.md
@@ -6,6 +6,146 @@ Here is a list of the individual components that have been through the complete
 
 Choose a combination of products to build your own Supported Stack. If anything is unclear then please [contact Support]({% link support/latest/contact.md %}).
 
+{% capture seven-two-two %}
+
+| Version | Notes |
+| ------- | ----- |
+| **Operating systems** | |
+| Red Hat Enterprise Linux 8.5 x64 | |
+| Red Hat Enterprise Linux 8.4 x64 | |
+| Red Hat Enterprise Linux 8.2 x64 | |
+| Windows Server 2019 | |
+| Amazon Linux | v2 |
+| CentOS 7.9 x64 | |
+| CentOS 8.3 x64 | |
+| Ubuntu 20.04 | |
+| Ubuntu 18.04 | |
+|  |  |
+| **Databases** | |
+| MySQL 8 | `mysql-connector-java-8.0.27.jar` |
+| MySQL 5.7.28 | `mysql-connector-java-5.1.49-bin.jar` |
+| MS SQL Server 2019 | `mssql-jdbc-9.2.1.jre11.jar` |
+| MS SQL Server 2017 | Microsoft JDBC Driver `7.2.2.jre11` for SQL Server. See [JDBC Driver](https://docs.microsoft.com/en-us/sql/connect/jdbc/system-requirements-for-the-jdbc-driver?view=sql-server-ver15){:target="_blank"} for supported versions. |
+| Oracle 19c | `Ojdbc8.jar – 19.11.0.0` |
+| PostgreSQL 13.3 | `Postgresql-42.3.2.jar` |
+| PostgreSQL 12.7 | |
+| PostgreSQL 12.4 | `Postgresql-42.2.18.jar` |
+| PostgreSQL 11.12 | |
+| PostgreSQL 11.7 | |
+| MariaDB 10.6 | |
+| MariaDB 10.5 | `MariaDB Connector/J 2.7.2` |
+| MariaDB 10.4 | `MariaDB Connector/J 2.7.1`|
+| Amazon Aurora | Use of Amazon Aurora is supported only if it is configured to emulate one of the supported versions of PostgreSQL or MySQL listed above, and the listed JDBC driver is used. |
+| | |
+| **Message brokers** | |
+| ActiveMQ v5.16.1 | |
+| | |
+| **Application servers** | |
+| Tomcat 9 | |
+| | |
+| **Clients** | |
+| Windows 10 x64 | |
+| Windows 7 x64 | |
+| Mac OSX 10.12 | |
+| | |
+| **Browsers** | |
+| Mozilla Firefox 86 | |
+| Microsoft Edge Latest| |
+| MS Internet Explorer 11 | |
+| Chrome 89 | Includes Chromium edition. |
+| Safari 14 | |
+| | |
+| **Java** | |
+| OpenJDK 11.0.13 | |
+| Amazon Corretto 11 | |
+| | |
+| **Third party integrations** | |
+| Microsoft 365 | |
+| MS Office 2016 | Microsoft Office for Mac does not support Kerberos authentication. |
+| | |
+| **Services** | |
+| Alfresco Governance Services 7.2 | |
+| Alfresco Process Services 2.4 | |
+| Alfresco Process Services 2.3 | |
+| | |
+| **Integrations** | Check the individual documentation on prerequisites and supported platforms for each integration. |
+| Alfresco Sync Service 3.11.3 | |
+| Alfresco Sync Service 3.11.1 | Additional compatibility testing was done with ACS 7.1, 7.2, 7.3, and 7.4. |
+| Alfresco Sync Service 3.8 | |
+| Alfresco Sync Service 3.7 | |
+| Alfresco Sync Service 3.6 | |
+| Alfresco Desktop Sync 1.18 | |
+| Alfresco Desktop Sync 1.17 | |
+| Alfresco Desktop Sync 1.16 | |
+| Alfresco Desktop Sync 1.15 | |
+| Alfresco Desktop Sync 1.14 | |
+| Alfresco Desktop Sync 1.13 | |
+| Alfresco Desktop Sync 1.12 | |
+| Alfresco Desktop Sync 1.11 | |
+| Alfresco Desktop Sync 1.10 | |
+| Alfresco Desktop Sync 1.9 | |
+| Alfresco Transform Service 4.1.2 | |
+| Alfresco Transform Service 2.1.1 | Additional compatibility testing was done with ACS 7.1, 7.2, 7.3, and 7.4. |
+| Alfresco Transform Service 2.0 | |
+| Alfresco Transform Service 1.5.2 | |
+| Alfresco Document Transformation Engine 2.4 | |
+| Alfresco Search Enterprise 3.1 | For information about migrating from Alfresco Search and Insight Engine 2.0 or Alfresco Search Services 2.0, see the [Alfresco Search Enterprise 3.x upgrade page]({% link search-enterprise/latest/upgrade/index.md %}). |
+| Alfresco Search and Insight Engine 2.0.3 | Search and Insight Engine is compatible with Java 11 as long as you run Zeppelin in a Java 8 runtime. You can do this either in a VM or separate Java 8 based server. |
+| Alfresco Search Services 2.0.3 | |
+| Alfresco Federation Services 2.1 | |
+| Keycloak 24.0.3 | Enable `Exclude Issuer from Authentication Response` - see [Authentication]({% link content-services/7.2/admin/auth-sync.md %}#enable-configuration-for-keycloak) |
+| Identity Service 1.8 | |
+| Identity Service 1.7 | |
+| SAML Module for Alfresco Content Services 1.2.3 | |
+| Alfresco Intelligence Services 3.1.3 | |
+| Alfresco Intelligence Services 1.4.4 | |
+| Alfresco Intelligence Services 1.4.2 | |
+| Alfresco Content Connector for AWS S3 5.1 | |
+| Alfresco Content Connector for AWS S3 5.0 | Adds support for AWS Glacier using Cloud storage layer. |
+| Alfresco Content Connector for Azure 3.1 | |
+| Alfresco Content Connector for Azure 3.0 | |
+| Alfresco Content Connector for Salesforce 2.3.4 and later | |
+| Alfresco Content Connector for SAP applications 5.3 | |
+| Alfresco Content Connector for SAP applications 5.2 | |
+| Alfresco Content Connector for SAP applications 5.1.1 | |
+| Alfresco Content Connector for SAP Cloud 1.2 | |
+| Alfresco Collaboration Connector for Microsoft 365 1.1.3 | |
+| Alfresco Collaboration Connector for Teams 1.1 | |
+| Alfresco Outlook Integration 2.9 | |
+| Alfresco Office Services 1.4.1 | |
+| Alfresco Google Docs Integration 3.3 | |
+| Alfresco Google Docs Integration 3.2.2 | |
+| Alfresco Content Services SDK 5.1 | |
+| Alfresco Content Services SDK 4.4 | |
+| | |
+| **Applications** | |
+| Alfresco Digital Workspace 4.4 | |
+| Alfresco Digital Workspace 3.0 | |
+| Alfresco Digital Workspace 2.9 | |
+| Alfresco Digital Workspace 2.8 | |
+| Alfresco Digital Workspace 2.7 | |
+| Alfresco Control Center 7.5 | |
+| Alfresco Control Center 7.4 | |
+| Alfresco Control Center 7.3 | |
+| Alfresco Control Center 7.2 | |
+| Alfresco Application Development Framework (ADF) 4.x | Some API functionality may be available only in the latest Alfresco Content Services release. |
+| Alfresco Mobile Workspace 1.8 | |
+| Alfresco Mobile Workspace 1.7 | |
+| Alfresco Mobile Workspace 1.6 | |
+| Alfresco Mobile Workspace 1.5 | |
+| Alfresco Mobile Workspace 1.4 | |
+| Alfresco Mobile Workspace 1.2 | |
+| Alfresco Content Accelerator (ACA) 3.6 | |
+| Alfresco Content Accelerator (ACA) 3.4.5 | |
+| Alfresco Enterprise Viewer (AEV) 3.6 | |
+| Alfresco Enterprise Viewer (AEV) 3.3.6 | |
+| | |
+| **Components** | |
+| ImageMagick v7.1.0-16 | |
+| LibreOffice v7.2.5 | |
+
+{% endcapture %}
+
 {% capture seven-two-one %}
 
 | Version | Notes |
@@ -73,6 +213,7 @@ Choose a combination of products to build your own Supported Stack. If anything
 | Alfresco Sync Service 3.8 | |
 | Alfresco Sync Service 3.7 | |
 | Alfresco Sync Service 3.6 | |
+| Alfresco Desktop Sync 1.18 | |
 | Alfresco Desktop Sync 1.17 | |
 | Alfresco Desktop Sync 1.16 | |
 | Alfresco Desktop Sync 1.15 | |
@@ -207,6 +348,7 @@ Choose a combination of products to build your own Supported Stack. If anything
 | Alfresco Sync Service 3.8 | |
 | Alfresco Sync Service 3.7 | |
 | Alfresco Sync Service 3.6 | |
+| Alfresco Desktop Sync 1.18 | |
 | Alfresco Desktop Sync 1.17 | |
 | Alfresco Desktop Sync 1.16 | |
 | Alfresco Desktop Sync 1.15 | |
@@ -275,4 +417,4 @@ Choose a combination of products to build your own Supported Stack. If anything
 
 {% endcapture %}
 
-{% include tabs.html tableid="supported-platforms" opt1="7.2.1" content1=seven-two-one opt2="7.2.0" content2=seven-two-zero %}
+{% include tabs.html tableid="supported-platforms" opt1="7.2.2" content1=seven-two-two opt2="7.2.1" content2=seven-two-one opt3="7.2.0" content3=seven-two-zero %}
diff --git a/content-services/7.2/tutorial/sso/index.md b/content-services/7.2/tutorial/sso/index.md
@@ -0,0 +1,24 @@
+---
+title: Single Sign On Guide
+---
+
+This documentation describes the configuration required to setup Single Sign On (SSO) capabilities for Alfresco products. Single Sign On refers to the ability for users to access Alfresco Share, the Alfresco Digital Workspace, and Alfresco Process Services in a single browser session by signing in only once to any of the applications.
+
+
+## Authentication types
+
+There are different authentication methods that can be used to configure SSO with. Each of these has additional prerequisites and detailed configuration steps:
+
+* Kerberos
+* LDAP
+* SAML
+
+## Post-configuration
+
+The following are items to be aware of after configuring SSO:
+
+* The Alfresco Process Services Administrator Application is not covered by SSO and is accessed using basic authentication.
+
+* If not using a Microsoft device and browser, users will be prompted to enter their credentials again when editing documents in Microsoft Office utilizing Alfresco Office Services (AOS).
+
+* User permissions need to be managed in individual products. For example, deactivating a user in Alfresco Content Services will not stop the same user from accessing Alfresco Process Services.