Single Sign-on with networked sites.

Permalink
Ok I am starting a new project and am currently exploring the multiple way to get it done. So one of the issues I may need to tackle is Single Sign-on for my users (a user logs into 1 system but can access multiple systems without having to login or create new accounts).

Has anyone explored how to accomplish this with c5 sites networked together?

ideasponge
 
olsgreen replied on at Permalink Best Answer Reply
olsgreen
You need to follow the master / slave model. (i.e. one site is the 'master' site with the auth databases)

You'll have to modify the master site to automagically propogate the auth. details to the slave sites. (I would go down the route of creating a job on the master site that runs every minute to accomplish this)

All sites should have the same salt value within the config.

You also have to ensure that the correct session tokens are set for the 'slave' servers to recognise the user is logged on. (Have a look at your cookies while logged on to a C5 site, you'll find the user hash)

You need to redirect all users from the slave sites to the master site for authentication.

The pointers should get you on the way.

Oliver
ideasponge replied on at Permalink Reply
ideasponge
I decided to take a different approach with this project and just use the Domain Mapping tool for now. But eventually this will be needed. thanks for the tips.