DELMIA Apriso SAML User Authentication Direct Integration

Recently we received an user case demo on third party user authentication support (Azure AD, Google, etc. ) request from our customer during presales activities. 

DELMIA Apriso supports various user authentication modes. It contains several built-in modes and an extensibility mechanism that allows building custom authentications.

Azure AD or other third party user authentication services which support SAML standard can be supported through 3DPassport which is one of the built-in method of DELMIA Apriso portal, Desktop Client, Process Builder, MPI Excel Add-In, Mobile Apps.

In case no 3DPassport environment is available, direct integration with Azure AD or other third party authentication engines is possible through custom coding of components that are responsible for user context retrieval or validation.

Some times it is challenging for the customer to mainten a 3DExperience server just for 3DPassport service. So it is useful to showcase the ability of DELMIA Apriso to be customized to support thirdparty user authenticaiton services directly. 

Following is the user authentication flow by SAML in case of direct integration with DELMIA Apriso:

We spent a little bit of time to develop a custom user authentication module and added it to Apriso for demo purpose. Obviously the implementation will be more complex in a real project context, but the technic required will be largely the same. 

We took following steps to implement this demo on a DELMIA Apriso demo server: 

1. Azure Active Directory Configuration

2. Custom Module Development and DELMIA Apriso Addition

3. DELMIA Apriso Default Logon Page Customization (Add URL to the custom module)

3. DELMIA Apriso Web.config file Configuration (Add custom sections for Azure AD and Google authentication service information)

Flowing is a demo video to show you the final result of the demo configuration: