6

Take a look at system/expressionengine/libraries/Auth.php. You should have all the available methods at your disposal to properly create any member session without actually submitting a login form. The ACT would work well I think, provided you pass all the other correct information. Here is a very minimal example of the proposed process. // Grab the member ...


4

I would develop an EE add-on that implements an SSO (single sign on) protocol, like oauth or SAML: http://en.wikipedia.org/wiki/Security_Assertion_Markup_Language and then have the the 3rd party app authenticate the user using their EE credentials, which would get passed back and forth between EE and the app using oauth, saml, or some other open ...


4

What about Disqus? Personally, I prefer sites that use Disqus for commenting than Facebook comments. Of course, that's not the entirety of your question. In terms of an easy-to-use sign-on. Social Login Pro seems to be the way to go, if you want people to be able to choose, which account they want to sign-in for. I like that it allows Google and Twitter, ...


3

It's worth bearing in mind that EE has plenty of hooks to make this sort of thing easier - sessions_end and member_member_logout are a couple that would be worth looking at. Depending on whether or not your app has a built in authentication library it would probably be fairly simple to write an extension that initiates a new session within your app. You'd ...


2

If Spam through your current comment forms is the issue then there is a great add-on to stop spam in EE called Snaptcha. We were getting a lot of Spam on a site we had built and this STOPPED the spam immeadiately. I can't recomend it enough. Super simple to implement. http://devot-ee.com/add-ons/snaptcha We have recently used Disqus on another site we just ...


1

If your intention is simply to allow other authentication schemes to act as mechanisms for gaining access to EE, you might get what you need from the "Social Sign In" plugin from Reinos.nl This does not offer access to the full SSO universe, but potentially covers a large proportion of it. I have not used this plugin, but can recommend Reinos stuff in ...


1

It is definitely possible. For my setup the necessary config was $config['multi_login_sites'] = "http://somesite.com/|http://anothersite.com/"; where you provide a pipe delimited list of each of your site's URLs. You will have to make sure that the URLs you provide are an exact match for what ExpressionEngine has for the {site_url}.


1

Perhaps you could build a wee API that returns a JSON or xml file for the active user. Something along the lines of.. Logged in True Username joe.bloggs Email joe.blogs@gmail.com Have a simple login template that could be popped up if the result of the above was false. Once they login refresh the page and their details would be good as gold. Additionally ...


Only top voted, non community-wiki answers of a minimum length are eligible