Can a single sign-on solution be used to share credentials between ExpressionEngine and LDAP/Active Directory?

  • We'll need a specific answerable question (or closely-related group of questions) for this to be considered on-topic. As it stands, you're soliciting opinions and discussion. Can you revise? Commented Jan 24, 2014 at 20:39
  • Sorry. Noob here.
    – jthomas
    Commented Jan 24, 2014 at 21:54

2 Answers 2


This LDAP extension looks like a good place to start - the extension is older, but it looks like all the pieces are in place. You could build on this as needed.

  • I have implimented this extension and it works well with a few tweaks. If you need any help of have questions, just let me know!
    – user2661
    Commented Jan 26, 2014 at 5:11

It's relatively easy to roll your own SSO solution because signing a user into ExpressionEngine is fairly simple.

If you have the appropriate data, it's easy to create an ExpressionEngine user, create a relationship (I've typically done this using a new database table) and sign this user in based on the response from the API you're using.

I'm not familiar with the required effort when it comes to working with LDAP but if you dig into the ExpressionEngine member module source code you'll see how simple it is to sign a user in or instantiate a new user.

  • I'm not a seasoned PHP developer, but may be able to get a feel for what's going on under the hood there. Thanks for pointing me in the right direction.
    – jthomas
    Commented Jan 27, 2014 at 23:55
  • No problem. If you wanted to get really raw with it, it can be as simple as copy/pasting certain blocks of code. It's veeeeery simple to replicate. Commented Jan 29, 2014 at 14:01

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.