Summary
When you started out the chapter, you had an Alfresco server that only knew about the users stored in its repository. By now, your server is not only authenticating against an external LDAP directory, but can also share a session with other web applications through the magic of Single Sign-On (SSO).
You saw some sample code for working with three of Alfresco's security services classes (AuthenticationService, AuthorityService, and PersonService)
and also learned where Alfresco keeps its permission definitions (and how to
extend them).
Specifically, you learned how to:
Install a basic OpenLDAP implementation
Configure Alfresco to authenticate against LDAP, including "chaining" LDAP with Alfresco authentication
Configure LDAP synchronization
Install and configure a popular open source SSO solution from JA-SIG called CAS
Establish SSO between Alfresco and two of Tomcat's sample servlets
Create users and groups with the Alfresco API
Understand the out-of-the-box permissions
Define a custom permission...
