Requirements

• ONLYOFFICE Docs 7.1 or higher

  You need an instance of ONLYOFFICE Docs that is resolvable and connectable both from SuiteCRM and any end clients. It must be able to POST to SuiteCRM directly.

  Please refer to the official ONLYOFFICE Docs documentation page to learn more about installing ONLYOFFICE Docs.
• ONLYOFFICE connector v1.0.0 and later for SuiteCRM

Installing the ONLYOFFICE integration module for SuiteCRM

Configuring JWT for the ONLYOFFICE and SuiteCRM integration

JWT or JSON Web Token is a string sent from client to server within the HTTP request to validate the authenticity of the client. JWT is saved on the client-side only so the transmission between parties is protected and digitally signed.

The token is generated using the JWT (JSON Web Tokens) standard. The tokens are signed by the server's key, so the client is able to verify that the token is legitimate.

ONLYOFFICE Docs validates the token. The data from the payload is considered valid and is used instead of the corresponding data from the main parameters. If the token is invalid, the command is not executed. To learn more, please read the API Security guide.

In ONLYOFFICE Docs, JWT is enabled by default starting from version 7.2.

Follow these steps to configure it manually if needed:

1. Go to Admin -> ONLYOFFICE -> ONLYOFFICE Settings.
   
2. Enter the values in the following fields:
   • Document Editing Service Address: Specify the URL address where ONLYOFFICE Docs is installed (e.g., https://documentserver).
   • Secret key (leave blank to disable): The secret key is generated automatically to restrict the access to ONLYOFFICE Docs. If you want to specify your own secret key in this field, also specify the same secret key in the ONLYOFFICE Docs config file to enable the validation.
   • Authorization header (leave blank to use default header): Standard JWT header used in ONLYOFFICE is Authorization. In case this header is in conflict with your setup, you can change the header to the custom one.