Developer forum

Forum » Development » Federated Identity Management (single sign on) and Dynamicweb

Federated Identity Management (single sign on) and Dynamicweb

Tom Kamphuis
Reply

Hi all,

Are there people who have some expierence using federated identity management (mainly the single sign on subset) in combination with Dynamicweb? We're looking at an architecture that needs to maintain a user logged in state over multimple websites / services.

Thanks!


Replies

 
Peter Leleulya
Reply

I attended a session "Integrating Users" by Jonas Dam (jkd@dynamicweb.dk) at the tech conference which didn't so much show maintaining a logged in state from one to the other platform, but he showed that a lot is possible with custom signing in. If no concrete reaction will be posted here, you might want to contact him.

 
Morten Bengtson
Reply

I'm also very interested in a solution to this. We currently have a setup where we synchronize user accounts from one DW site to others. This makes it possible to log in with the same credentials, but it's a crappy way to handle it and it doesn't provide real single sign on, since you still need to log on to each site.

My guess is that we would need to implement OpenId Connect or something similar.

The client part should be relatively easy to implement, since it would be very similar to the existing implementations for external login (Google, Twitter, etc.) if it was basd on Microsoft.Owin.Security.OpenIdConnect.

The server part is a lot more complex, but it could be implemented using the IdentityServer framework.

Maybe there is a simpler solution than this? I don't know. It would be great to get some input from Jonas Dam.

Also, I hope that some documentation and examples (maybe even a webinar?) will be made available to help us create our own implementations based on Dynamicwebs ExternalLoginProvider.

BR, Morten

 
Jonas Krarup Dam
Reply

Hi Guys,

As someone rightly mentioned, I did talk about this (or something very close to it) on the tech conference.

Basically, we have implemented social media login (google, facebook, twitter), using the OAuth prototcol.

I had an example for creating a "custom" loginprovider, in this case linkedIn, which I showed during the tech conference talk, but it gave me a bit of trouble, so I want to double check it before I make it available on GitHub. I hope to get around to it this week.

If you are in a great hurry, and want the code (which worked before the tech conf, but for some reason failed during the presentation), feel free to mail me, and I'll send you a copy of it, "as is".

We are also talking about making the sessions from the tech conference available as videos (recorded after the fact), so look out for that in the not too distant future :-)

/Jonas

 
Lars Larsen
Reply

+1 for making the sessions from the Tech Conference available as videos.

 
Jonas Krarup Dam
Reply

Hi Guys,

I have added the linkedIn external login provider to our github repository.

It can be found here:

https://github.com/dynamicweb/dwtc15

/Jonas

 
Morten Bengtson
Reply

Hi Jonas,

Thanks for sharing! I will check it out later.

Do you have any plans for additional standard login providers? I'm kinda lazy, so I don't want to spend time on implementing stuff that you are going to provide soon ;-)

 
Morten Bengtson
Reply

argh... double posted

 
Jonas Krarup Dam
Reply

Hi Morten,

No firm plans, but we've talked about adding a few more. As always, we don't want to add a bunch of niche functionality.

if there are some Oauth providers that you want/need, let me know, and I'll see if I can squeeze them in :-)

/Jonas

 
Peter Leleulya
Reply

Hi Jonas,

Tom Kamphuis and myself will be in Denmark on april 9 and 10, perhaps this maintain a user logged in state over multimple websites / services is something we can do as a hands on exercise and publish the result here?

BR Peter

 
Jonas Krarup Dam
Reply

Hi Peter,

I've informed Jesper about the suggestion - he is coordinating your visit here.

You can talk to him (or the people coordinating on your side) about adding it to the agenda :)

/Jonas

 

You must be logged in to post in the forum