ConradJones Posted April 29, 2014 Posted April 29, 2014 I have a number of web based services that run on LAMP. I need to tie the logins together, so users only have to login to one service or a main authentication service and then they are logged into all other services.... one example is osticket. another is magento. I don't modifying osticket or developing a plugin for magento but i don't want to do the whole thing from scratch is there something opensource thats good that handles the main authentication?
dhicks Posted April 29, 2014 Posted April 29, 2014 I don't modifying osticket or developing a plugin for magento but i don't want to do the whole thing from scratch is there something opensource thats good that handles the main authentication? Are the services all on separate servers, or are some on the same servers? Could you just join those servers to Active Directory, would that be enough to get them all using the same logins? Single sign-on is something different (sign on once at the client end and you're signed in to all services), but getting the backends using the same authetication would be a start.
Marci Posted April 29, 2014 Posted April 29, 2014 Both osticket and magento support authentication (either natively or by plugins) against AD via Kerberos under LAMP... If all your other webservices do, then that's (literally) the ticket.
EduTech Posted April 30, 2014 Posted April 30, 2014 wouldn't shibboleth be able to support something like this? I'm not very LAMP knowledgeable but just a thought.... James.
ConradJones Posted April 30, 2014 Author Posted April 30, 2014 wouldn't shibboleth be able to support something like this? I'm not very LAMP knowledgeable but just a thought.... James. yeh i had a look at that last night, that looks like the answer. integration looked scary but it was about 4:00am!
bencellis Posted April 30, 2014 Posted April 30, 2014 Have a look at an simplesamlphp (https://simplesamlphp.org/) - it will handle various Single Sign On solutions incl Shibboleth, if you must and with the addition of extensions things like OAuth and CAS. If you use it as both the IDP (you main authentication) and your SPs (each application) then it would make life easier.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now