zend framework2 - ZF2 Setting up LDAP SSO -
i'm creating site works in network (with other sites) share same active directory authenticate users (sso).
i've manage authenticate user...
$auth = new \zend\authentication\authenticationservice(); $options = array( 'server' => array( 'host' => $host, 'basedn' => $dc ), ); $adapter = new \zend\authentication\adapter\ldap($options, $username, $password); $result = $auth->authenticate($adapter);
... dont how check if user auth'ed (from site in network) or need keep in session (or headers?) others sites knows user logged in.
thanks!
if there provision multiple-site sso created organization working with, require oauth, wraps directory service , handles sso in browser-friendly way. i've seen sso web apps done non-oauth ways too, has relied on sites sharing common root domain, , hence having shared cookie scope.
bottom line: sso between domains not in-built feature of zend\authentication or ldap in general.
fwiw, i've built custom zend\authentication adapter custom corporate sso scheme before, , it's snap. have implement simple interface.
also fwiw, if don't have sso, we're implementing similar, building custom oauth2 provider wraps customer's directory service. after weighing options, we're going https://github.com/bshaffer/oauth2-server-php core library. (note: careful signing for, building , owning oauth2 provider non-trivial)
Comments
Post a Comment