WordCamp NYC Authentication 2009-11-13
•
0 likes•445 views
This document discusses user authentication in existing ecosystems and integrating WordPress with external authentication systems like LDAP, Shibboleth, OpenID, and CAS. It proposes replacing user-facing components of university systems with WordPress to provide a single sign-on experience for users, allowing them to access multiple systems with the same credentials. Diagrams show how credentials would be checked against Active Directory and WordPress databases, provisioning accounts or syncing passwords as needed. The approach aims to reduce the burden of separate accounts and improve password management compared to current university portal systems.
More Related Content
Viewers also liked
Viewers also liked (20)
Similar to WordCamp NYC Authentication 2009-11-13
Similar to WordCamp NYC Authentication 2009-11-13 (20)
Recently uploaded
Recently uploaded (20)
WordCamp NYC Authentication 2009-11-13
- 1. User Authentication with MU in Existing Ecosystems Casey Bisson
- 4. WordPress MU
- 5. WordPress MU
- 6. University
- 7. University
- 10. External Authentication LDAP Shibboleth OpenID CAS (central authentication service)
- 11. External Authentication LDAP Shibboleth OpenID CAS (central authentication service) authN + authZ authN only
- 14. If that’s all you need, you’re set.
- 15. Irony Many university systems behave like you’ve never used the internet before. Despite directory services, many university users must maintain accounts in multiple systems. Our expensive commercial portal doesn’t offer user-initiated password resets or user profiles.
- 16. Law (almost) "[An] institution may not make education records available electronically by using a common form user name (e.g., last name and first name initial) with date of birth or SSN, or a portion of the SSN, as an initial password to be changed upon first use of the system."
- 17. My Simple, Evil Plan Replace user-facing components with WordPress
- 22. Submit No No Yes Yes Yes No Matches AD credentials? Provision account or sync password to WP Username and password entry Yo! Credentials Matches WP credentials? Has full university account? SunGard Luminis Portal WordPress/ BuddyPress
- 23. Submit No Ma Username and password entry Yo! Credentials Ma
- 24. Submit No Ma Username and password entry Yo! Credentials Ma
- 27. Submit No No Yes YesMatches AD credentials? Matches WP credentials?
- 28. Submit No No Yes YesMatches AD credentials? Matches WP credentials?
- 29. Yes Yes Yes No Provision account or sync password to WP Has full university account?
- 30. Yes Yes Yes No Provision account or sync password to WP Has full university account?
- 31. Yes Yes Yes No Provision account or sync password to WP Has full university account?
- 32. Yes Yes Yes No Provision account or sync password to WP Has full university account?
- 42. Plugins, Hooks, Functions Plugins we’ve released: Alternate Contact Info, WordPress Ticket Framework, wpSMS Unreleased code replaces wp_authenticate() and hooks do_action(‘login_form’ . $action) Much more detail in my blog post