User signs in on domain-one.com, can it send a login to my vanilla installation at domain-two.com?
domain-one.com has a basic username/password login system. If the login is successful, I would like it to also post a login request to a vanilla installation at domain-two.com if possible. If preferred, I would like to do this via AJAX, as domain-one.com's login system is done with ASP... Unless with ASP I can do some kind of cURL POST?
I already have modified the entry controller to automatically create an account from the user database on domain-one.com if the login doesn't already exist. Thanks guys
Best Answer
-
x00 MVP
Check out jsConnect plugin it is cross domain. If you want help with SSO send me a message. POST'n login details is very not secure the login details could be hijacked, it also doesn't help synchronicity. Instead you need a multi-stage handshake in the background that provides proper credentials for authenticity.
Don't modify core unless you have to, this can cause untold problem if you re not sure what you are doing.
grep is your friend.
0
Answers
Check out jsConnect plugin it is cross domain. If you want help with SSO send me a message. POST'n login details is very not secure the login details could be hijacked, it also doesn't help synchronicity. Instead you need a multi-stage handshake in the background that provides proper credentials for authenticity.
Don't modify core unless you have to, this can cause untold problem if you re not sure what you are doing.
grep is your friend.
Thanks x00, It's almost 5.30 here so home time for me! So I will be implementing this when I get back to work tomorrow. Sounds like it should be fairly straight forward. Thanks again for your answer
I tried to write a plugin for the integration, but because of time restraints I couldn't learn how to properly do it. Let me show you what I have done to the entry controller, perhaps you know a way I could have done this with a module/plugin?
http://pastebin.com/FMW4FfZT
Oh and I have added two fields to the User model: About_Info and About_CSV_ID, and one method to the user model: $User->UpdateAboutInfo
Just for reference, About_Info is another field that contains information from the CSV file that only the admin can see.
Read this
http://vanillaforums.org/docs/jsconnect
yes it is a job for plugins if you are making the authenticator side vanilla.
grep is your friend.