+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 18
Windows Thread, Single Sign on - Cheaply? in Technical; ...
  1. #1
    reggiep's Avatar
    Join Date
    Apr 2008
    Location
    In the vast area of space and time
    Posts
    1,548
    Thank Post
    517
    Thanked 56 Times in 50 Posts
    Rep Power
    29

    Single Sign on - Cheaply?

    We are currently building a new domain for summer and trying to think of added extras we can add on to the network to make it a more pleasant user experience.
    One thing that had been asked about in the past was SSO so we did look into it with Tools4ever UK but the cost would be nearly £6000 for licencing and set up.
    I was hoping for something a little more on the free/cheap side!
    We'd like our users to not have to log in to their email (live@edu-staff google apps-students) or moodle(On a linux box) every time they log on.

    Anyone have any suggestions?

    Thanks

  2. #2
    jamesfed's Avatar
    Join Date
    Sep 2009
    Location
    Reading
    Posts
    2,203
    Thank Post
    137
    Thanked 342 Times in 289 Posts
    Rep Power
    86
    Are we talking Single Instance Sign On where you login to the PC once and thats the last time you touch a username/password box forever or Single Sign On where you have a single username/password for all your services but are prompted to login to each one?

  3. #3


    tom_newton's Avatar
    Join Date
    Sep 2006
    Location
    Leeds
    Posts
    4,475
    Thank Post
    866
    Thanked 849 Times in 671 Posts
    Rep Power
    196
    moodle can probably work with ntlm or kerberos through apache...

  4. #4

    glennda's Avatar
    Join Date
    Jun 2009
    Location
    Sussex
    Posts
    7,810
    Thank Post
    272
    Thanked 1,135 Times in 1,031 Posts
    Rep Power
    349
    Quote Originally Posted by tom_newton View Post
    moodle can probably work with ntlm or kerberos through apache...
    Yes it can - easier to setup on windows but can be done on linux so I'm told I got bored trying!

  5. #5
    reggiep's Avatar
    Join Date
    Apr 2008
    Location
    In the vast area of space and time
    Posts
    1,548
    Thank Post
    517
    Thanked 56 Times in 50 Posts
    Rep Power
    29
    Well, I guess logging in to the computer and then not having to log into anything else would be the nicest solution but not sure if that is achievable.
    I did have a look at ntlm with moodle but it did get a bit scary.

  6. #6

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,618
    Thank Post
    648
    Thanked 1,619 Times in 1,449 Posts
    Rep Power
    421
    live@edu / office 365 for education can be configured with on-premises s/w to facilitate what you desire.

    Ben

  7. Thanks to plexer from:

    reggiep (3rd April 2012)

  8. #7
    reggiep's Avatar
    Join Date
    Apr 2008
    Location
    In the vast area of space and time
    Posts
    1,548
    Thank Post
    517
    Thanked 56 Times in 50 Posts
    Rep Power
    29
    Quote Originally Posted by plexer View Post
    live@edu / office 365 for education can be configured with on-premises s/w to facilitate what you desire.

    Ben
    I believe that is something to do with forefront?

  9. #8

    GrumbleDook's Avatar
    Join Date
    Jul 2005
    Location
    Gosport, Hampshire
    Posts
    9,935
    Thank Post
    1,341
    Thanked 1,784 Times in 1,107 Posts
    Blog Entries
    19
    Rep Power
    595
    Quote Originally Posted by reggiep View Post
    I believe that is something to do with forefront?
    For single sign-on with Live@Edu / Office365 then have a look at the MS blog UK Live@edu Blog - Site Home - MSDN Blogs or chat to @jamesbmarshall as he is the best port of call. The blog has a lot of guides about how you can do the integration and if you search on EG you can see what others have said about the limitations or benefits of each option available.

  10. Thanks to GrumbleDook from:

    reggiep (3rd April 2012)

  11. #9

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,618
    Thank Post
    648
    Thanked 1,619 Times in 1,449 Posts
    Rep Power
    421
    Quote Originally Posted by reggiep View Post
    I believe that is something to do with forefront?
    Forefront Identity Manager AKA FIM yes.

    Ben

  12. #10
    jamesbmarshall's Avatar
    Join Date
    Feb 2010
    Location
    Reading, UK
    Posts
    524
    Thank Post
    26
    Thanked 229 Times in 159 Posts
    Rep Power
    86
    Quote Originally Posted by GrumbleDook View Post
    ...or chat to @jamesbmarshall as he is the best port of call.
    Fire away!

  13. #11
    reggiep's Avatar
    Join Date
    Apr 2008
    Location
    In the vast area of space and time
    Posts
    1,548
    Thank Post
    517
    Thanked 56 Times in 50 Posts
    Rep Power
    29
    Quote Originally Posted by jamesbmarshall View Post
    Fire away!
    Aha, We currently use live@edu for our staff but not students as there doesn't seem to be an easy way to link via AD. Google has a tool to create a script that we run regularly that adds the AD users we select to google apps. Anyway that's just a grumble for another time!

    We are currently setting up a new domain which we will be adding as much MS tools as we can that are covered by the MS license agreement that we have. Would FIM be a tool we would need?

    Thanks

  14. #12

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,618
    Thank Post
    648
    Thanked 1,619 Times in 1,449 Posts
    Rep Power
    421

  15. #13
    reggiep's Avatar
    Join Date
    Apr 2008
    Location
    In the vast area of space and time
    Posts
    1,548
    Thank Post
    517
    Thanked 56 Times in 50 Posts
    Rep Power
    29
    Quote Originally Posted by plexer View Post
    Looks like we really need to install FIM!

  16. #14

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,618
    Thank Post
    648
    Thanked 1,619 Times in 1,449 Posts
    Rep Power
    421
    There is a similar set of steps for office 365 and as live@edu is becoming office 365 for education you may want to hold fire on anything at the moment.

    With the live@edu tools you use pcns to sync password changes but that isn't used for office 365 so there is no password sync.

    MigrationWiz have produced a simple tool to sync ad and office 365 but it's only available to customers using their migration tool.

    MigrationWiz AD to Office 365 DirSync Deployment Guide « MigrationWiz Blog

    Ben

  17. #15
    jamesbmarshall's Avatar
    Join Date
    Feb 2010
    Location
    Reading, UK
    Posts
    524
    Thank Post
    26
    Thanked 229 Times in 159 Posts
    Rep Power
    86
    Quote Originally Posted by reggiep View Post
    Would FIM be a tool we would need?
    You can use FIM 2010 (and the OLSync management agent) to automatically provision users into Live@edu; for a bit of added work you could also set up PCNS and sync passwords from your AD as well - resulting in your users have a single set of credentials to manage (and a single place to manage them from, too!).

    In fact, if you really wanted to pull out the stops you could also use FIM to build a self-service password reset portal for your users, and then you can practically write off ever having to reset a user's password manually ever again! (Obviously, that's with my "optimist hat" on! )

    SSO is a really difficult thing to define properly. Most of the time customers just want what I would term as "CSO" (consistent sign-on), rather than a seamless experience.

    With Live@edu you can achieve this using the FIM+OLSync+PCNS model for CSO, and you can build a form of SSO if you want to integrate Live@edu into a web portal that you might already have (i.e. users sign into that portal, and are automatically auth'd into Live@edu).

    With Office 365 for education you have better choices as you can go for federation, but with a significant number of different devices and user scenarios to consider it's worth spending some time to figure out exactly which scenarios you're going to support rather than trying to support everything.

    Hope that helps!

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Moodle - Single Sign on
    By ceebster in forum Virtual Learning Platforms
    Replies: 2
    Last Post: 18th June 2014, 11:28 AM
  2. Single Sign on software
    By localzuk in forum General Chat
    Replies: 36
    Last Post: 17th July 2008, 10:25 AM
  3. Moodle Single Sign On with CMS
    By monkeyx in forum Virtual Learning Platforms
    Replies: 0
    Last Post: 26th November 2007, 08:39 AM
  4. ePortal and CC3 Single Sign On
    By budgester in forum MIS Systems
    Replies: 3
    Last Post: 21st June 2007, 10:26 AM
  5. CMIS ePortal Single Sign-on
    By markberry in forum MIS Systems
    Replies: 12
    Last Post: 26th March 2007, 11:27 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •