Enter Alfresco!

Alfresco is an Open Source Content Management System (CMS) incorporating key principles of document management, record management, web content management and enterprise collaboration. I have had Alfresco on my “to look into” list for some time now so I thought I would bite the bullet and see if it could conquer our current file management woes. What I would like to achieve from this project includes the following:

• Collaborative content management of student and staff data
• Anywhere access to collaborative and personal data from any web capable device
• Document version control (revision history)
• Single sign-on (SSO) authentication tied to our network directory (Active Directory)
• Integration with other collaborative services such as Moodle and Google Apps
• Centralised management for ICT staff
• Multi platform support (Windows, OS X and various Linux distributions)

Building upon these fundamental points, I would like for staff and students to have a space where they can continue to collaborate together outside the schools walls. The system would allow us to provide their content to them via the local network (ie: mapped CIFS drive) internally or via various web protocols from outside the school on their chosen device – hence maintaing anywhere access. Throughout the schools ICT systems we implement a standard whereby if the system requires authentication the user is able to use their single network directory (active Directory) credentials thus upholding a Sigle sign-on (SSO) cluster of systems. This would need to continue throughout the various facilities within the Alfresco CMS.

The school has implemented Moodle as its Learning Management System (LMS) and has employed the services of a Google Apps Educational account to provide email and other collaborative services to every student and teacher. The Alfresco CMS would need to tie into these current systems and further them to the benefit of the students learning. Our Moodle LMS currently resides on a Linux server which would also need to be able to call upon content stored within Alfresco’s filesystem hierarchy. In tern, Alfresco would be required to be accessible by the multiplatform structure that we have in place throughout the school.

From my reading, which has merely scratched the surface of what Alfresco can provide, I am confident that this CMS will be able to fulfill the school’s requirements and continue to exceed them as we explore its facilities. In the near future I hope to build a test server using Alfresco’s freely available Community Edition to put the system through its paces and confirm that it will be able to fulfill our needs before proceeding down the path of a production server and storage solution. My aim is to document my  way through this project via this blog. This process may be slow whilst I find some free time if that does indeed still exist in this world we live in…

Our school also uses Google Apps Education Edition to provide our students with Email accounts and usage of the other Google Apps services. Google provides a great LDAP sync tool that can easily sync users and groups memberships but lacks a way to sync users passwords (not secure). For this to be possible a Single Sign On (SSO) system must come into the equation. These systems can cost thousands of dollars (depending on user numbers) from 3rd party developers or require a large amount of IT admin time and server resources to perfect a solid solution. I searched long and hard for a suitable tool for this job and tried a number of solutions but none worked well enough for my liking.

At the same time that I was searching for solutions for this issue I was also browsing around for some useful Moodle plugins. This is where I came across the Moodle-Google Intergration plugin that would solve all my issues. The plugin provides a SAML based authentication method to allow users to use their LDAP credentials (LDAP must be configured in Moodle) to log into their Google Apps account. This plugin talks with the SSO feature built into Google Apps via SAML 2.0 post and the use of the generated keys and certificates for security. Users then login to Moodle and from there can access their Google Apps account.

More to come on the configuration of this plugin. Stay tuned…