1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

SSO Possible?

Discussion in 'XenForo Pre-Sales Questions' started by Coder1, Sep 6, 2011.

  1. Coder1

    Coder1 New Member

    I didn't want to hijack the CAS thread, but I came here looking for similar information.

    With the XenForo add-on system, is it possible to integrate an SSO solution?

    1) Using XenForo as the master user base wouldn't be that difficult as long as we had a way we could securely test in an external PHP script/app if a user is logged in, and then get that user info for the external system to use for SSO.

    Question: Can these tests be done from external scripts on the same top level domain?

    2) Using an external app as the master user base would be a lot more complicated I'm sure as there would need to be ways to hook code into the login/register/update screens, or a way to entirely substitute those pages with the external app. Who knows what the external app is going to be so how can you plan for that huh?

    It would be helpful even if there was basic support for auto-logging in/adding a user from an add-on could be done. Then maybe a redirect option for basic the basic account info like username, email, & password.

    Question: I understand #2 is a fluffy question, but is this being considered with this software?

    SSO support would definitely open up a new range of potential clients for this software.
  2. Digital Doctor

    Digital Doctor Well-Known Member

    what software were you hoping to use with xenforo ?

    Is your question ... is Xenforo.com going to release a SSO addon that would allow external apps to work with it ?
    I think the answer there would be: unlikely.

    Software integration (and the level of integration) can be complex. It really depends on the exact software and the level of integration you want.

    Have you used phpCAS before ?
  3. kkm323

    kkm323 Well-Known Member

    i am sorry, but i am lost here o_O
    craigiri likes this.
  4. Coder1

    Coder1 New Member

    Drupal or any other system of users that could use a forum, whether it's a CRM or a companie's AD via LDAP. I've written Drupal 6 bridges for VB where VB was the master, but it was done by basically making Drupal the SSO point. I'm guessing it wouldn't be too difficult to do with XenForo, but it would be super if just some basic API support was provided out of the box to do this. (scenario #1 in my original question)

    Maybe, or just a simple API for developers to connect to.

    I have not used it before, but I will check it out.
  5. Digital Doctor

    Digital Doctor Well-Known Member

    Ah. Good suggestion. You might want to make a formal request for this.

    Drupal is "CASified": http://xenforo.com/community/threads/cas-central-authentication-server.19265/#post-247586
    Another suggestion might be to ask Xenforo to be "CAS-ified". You might want to make a formal request for this.
  6. James

    James Well-Known Member

  7. Reeve of Shinra

    Reeve of Shinra Well-Known Member

    Xenforo supports authentication against Facebook and Twitter and someone else released a mod that allowed for authentication against the Steam gaming service. Theoretically speaking then, the framework is in place if you had a coder who would be able to roll one out for you.
  8. Coder1

    Coder1 New Member

    Great point Reeve, ... that would mean part of my #2 question is probably already considered.

    Thanks for the info guys. Next step is for me to do some testing.
  9. James

    James Well-Known Member

    The easiest way to log in with another application (I think) would be to add another action to XenForo_ControllerPublic_Register and handle the registration there.

Share This Page