0

Can a single sign-on solution be used to share credentials between ExpressionEngine and LDAP/Active Directory?

  • We'll need a specific answerable question (or closely-related group of questions) for this to be considered on-topic. As it stands, you're soliciting opinions and discussion. Can you revise? – Derek Hogue Jan 24 '14 at 20:39
  • Sorry. Noob here. – jthomas Jan 24 '14 at 21:54
0

This LDAP extension looks like a good place to start - the extension is older, but it looks like all the pieces are in place. You could build on this as needed.

| improve this answer | |
  • I have implimented this extension and it works well with a few tweaks. If you need any help of have questions, just let me know! – user2661 Jan 26 '14 at 5:11
0

It's relatively easy to roll your own SSO solution because signing a user into ExpressionEngine is fairly simple.

If you have the appropriate data, it's easy to create an ExpressionEngine user, create a relationship (I've typically done this using a new database table) and sign this user in based on the response from the API you're using.

I'm not familiar with the required effort when it comes to working with LDAP but if you dig into the ExpressionEngine member module source code you'll see how simple it is to sign a user in or instantiate a new user.

| improve this answer | |
  • I'm not a seasoned PHP developer, but may be able to get a feel for what's going on under the hood there. Thanks for pointing me in the right direction. – jthomas Jan 27 '14 at 23:55
  • No problem. If you wanted to get really raw with it, it can be as simple as copy/pasting certain blocks of code. It's veeeeery simple to replicate. – Tyler Willingham Jan 29 '14 at 14:01

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.