Skip to main content
edited tags
Link
Rarst
  • 99.9k
  • 10
  • 160
  • 298
SSO? ABC? XYZ? ... title edited to reflect ambiguous acronym
Link
Adam
  • 16.5k
  • 1
  • 44
  • 62

SSO Single sign on for multiple domains

deleted 4 characters in body
Source Link
Aram Boyajyan
  • 275
  • 1
  • 4
  • 15

I want to connect two sites which are not on the same domain and allow uses to be logged in to both, by logging in to only one site.

I found a huge number of topics and plugins but most of them deal with the subdomains of one parent domain (site1.domain.com and site2.domain.com) which is not what I want.

Both sites will be on the same server, so accessing the database from either of them won't be a problem.

I am thinking of the custom plugin which will do the following:

When a user is logged to one site, generate a hash, store in DB, redirect to the other domain/sso with an ID and if the IDs match, login there as well and redirect back to the first site. This way I will avoid all browser troubles with cross domain cookies and iframes/other hacks. From security point of view, all hashes will expire in 1 minute so automaticallyautomatic (brute force) check of IDs will be impossible. I can even mix it with an IP address and cookie/session to make it more secure.

My questions are:

  1. What is the best approach for this? Is there an existing solution for what I am trying to do?
  2. Is there a plugin I should use?

Thanks!

I want to connect two sites which are not on the same domain and allow uses to be logged in to both, by logging in to only one site.

I found a huge number of topics and plugins but most of them deal with the subdomains of one parent domain (site1.domain.com and site2.domain.com) which is not what I want.

Both sites will be on the same server, so accessing the database from either of them won't be a problem.

I am thinking of the custom plugin which will do the following:

When a user is logged to one site, generate a hash, store in DB, redirect to the other domain/sso with an ID and if the IDs match, login there as well and redirect back to the first site. This way I will avoid all browser troubles with cross domain cookies and iframes/other hacks. From security point of view, all hashes will expire in 1 minute so automatically (brute force) check of IDs will be impossible. I can even mix it with an IP address and cookie/session to make it more secure.

My questions are:

  1. What is the best approach for this? Is there an existing solution for what I am trying to do?
  2. Is there a plugin I should use?

Thanks!

I want to connect two sites which are not on the same domain and allow uses to be logged in to both, by logging in to only one site.

I found a huge number of topics and plugins but most of them deal with the subdomains of one parent domain (site1.domain.com and site2.domain.com) which is not what I want.

Both sites will be on the same server, so accessing the database from either of them won't be a problem.

I am thinking of the custom plugin which will do the following:

When a user is logged to one site, generate a hash, store in DB, redirect to the other domain/sso with an ID and if the IDs match, login there as well and redirect back to the first site. This way I will avoid all browser troubles with cross domain cookies and iframes/other hacks. From security point of view, all hashes will expire in 1 minute so automatic (brute force) check of IDs will be impossible. I can even mix it with an IP address and cookie/session to make it more secure.

My questions are:

  1. What is the best approach for this? Is there an existing solution for what I am trying to do?
  2. Is there a plugin I should use?

Thanks!

Source Link
Aram Boyajyan
  • 275
  • 1
  • 4
  • 15
Loading