Create a Custom Authenticator

It is possible to plug to any existing authentication mechanism such as SiteMinder, etc.

To configure a custom authentication do the following:

• Edit the WEB-INF/xwiki.cfg file and add a xwiki.authentication.authclass property pointing to your class. For example:

• XWiki 13.3+ To comply with latest best practices, your custom authentication should trigger a UserAuthenticatedEvent event when user authenticates. You can find implementation examples in xwiki-platform-oldcore as MyFormAuthenticator and MyBasicAuthenticator. Note that a UserAuthenticatedEvent should be created with a UserReference.

You can find various authenticators examples in sandbox or extensions.

Here's a tutorial on implementing a custom authentication class for authenticating against Oracle's SSO.