Downloaded 566 times
Uploaded byIvo Jansch
Building an SSO platform in php (Zendcon 2010)
The document presents a discussion by Ivo Jansch on building a Single Sign-On (SSO) platform, covering different levels of identity management protocols such as LDAP, OpenID, OAuth, SAML, and federation management. It emphasizes the importance of not creating more user IDs and utilizing standard protocols for authentication in future projects. Additionally, it provides references and resources for integrating SSO with various applications.
More Related Content
Similar to Building an SSO platform in php (Zendcon 2010)
Building an SSO platform in php (Zendcon 2010)
- 1. Building an SSOplatform Ivo Jansch - Egeniq November 4, 2010 - Zendcon
- 2.
- 3.
- 4. Single Sign On Whydo we need it?
- 5. We use manyapplications Your other corporate application Your corporate application
- 6. Across devices andlocations Your other corporate application Your corporate application
- 7.
- 8. Level 0 -One Password To Rule Them All
- 9. 1 password torule them all Your other corporate application Your corporate application
- 10. Level 1 -Shared Identity Using a single authentication backend for apps
- 11.
- 12. Level 2 -OpenID Using OpenID for external Identity Management
- 13.
- 14.
- 15.
- 16. Delegate to OpenIDprovider
- 17.
- 18. Caveats OpenID providers hesitantto be OpenID consumers No trust establishment between consumer and provider
- 19. Level 3 -OAuth Using OAuth for external IDM and authorization
- 20.
- 21. Landing adjusted forOAuth
- 22.
- 23. Delegate auth toTwitter
- 24.
- 25. Level 4 -SAML Creating our own Identity Provider
- 26. SAML Security Assertion MarkupLanguage XML standard by OASIS Assertions contain: Proof of Identity Attributes Supports XML signatures and encryption
- 27.
- 28.
- 29.
- 30. IDP Auth SourceConfiguration
- 31.
- 32.
- 33. IDP Virtual HostApache Config
- 34.
- 35.
- 36. SP Auth SourceConfiguration
- 37.
- 38. Back to ourlanding page
- 39. Delegate auth tothe IDP
- 40. Integrating 3d partyapps Simplesamlphp is easy to integrate
- 41.
- 42.
- 43. SugarCRM Plugin: didn’t work Problem:auth structure Solution: hacking the source Options: Contact me if you need to get SugarCRM to do SSO :-) Wait for SugarCRM 6.1, it contains a working SAML plugin (/via @smalyshev)
- 44. Google Apps Requires Premieror Education Edition Configure SAML endpoint => Done! Docs: http://code.google.com/googleapps/domain/sso/ saml_reference_implementation.html
- 45.
- 46. Making apps SSOready Application Logged in? Auth Plugin Yes Show Site Login Form Authenticate Start No
- 47. Making apps SSOready Application Logged in? Auth Plugin Yes Show Site Login Form Authenticate Start No
- 48. Making apps SSOready Application Logged in? Auth Plugin Yes Show Site Login Form Authenticate Start No
- 49. Making apps SSOready Application Logged in? Auth Plugin Authenticate Start No Login Form Show Site Login Form Yes
- 50. Level 5 -Federation Dealing with multiple Identity Providers
- 51.
- 52.
- 53.
- 54.
- 55.
- 56. Conclusion What should youtake away from this talk?
- 57. In your nextproject... You will NOT create more userids !! You WILL use standard protocols !!
- 58. Thank You ivo@egeniq.com http://www.egeniq.com @ijansch@egeniq Please leave feedback at: http://joind.in/2282
- 59. Credits Pictures used inthis presentation are creative commons attribution licensed pictures. Here are the owners and the URLS where the originals can be found: ‘Multiple Padlock Farm Gate’ by Mike Baird - http://www.flickr.com/photos/mikebaird/2354116406/ ‘Love Locks’ by James Manners - http://www.flickr.com/photos/jmanners/443421045/ ‘Seguridad’ by Juan J. Martinez - http://www.flickr.com/photos/reidrac/4696900602/ ‘Hotel Keys by Henri Bergius - http://www.flickr.com/photos/bergie/3468886680/ ‘OAuth Shiny’ by Chris Messina - http://www.flickr.com/photos/factoryjoe/3343062926/ ‘Take a number please’ by Andres Rueda - http://www.flickr.com/photos/andresrueda/3259487071/ ’38/365 Puzzled’ by Mykl Roventine - http://www.flickr.com/photos/myklroventine/3261364899/ ‘Visiting Portage’ by Jeremy Bronson - http://www.flickr.com/photos/jbrons/4444017497/ ‘_dsc8037’ by Sergey Vladimirov - http://www.flickr.com/photos/vlsergey/4138735474/ Application logo’s and other icons have been used under the assumption that use of them in this context is considered fair use.