Multisite, single sign-on sans openID....any pointers?
I've got a client who is looking at having around 50 or so multisites, all different domains, but would like allow either a single sign on approach, i.e. signin once and automatically be authenticated across all the multisites, or have the same user/pwd but have to sign in, using that across sites, with shared profiles.
Any, semi secure way to do this without using OpenID?
I've taken a cursor look at this module, http://drupal.org/project/multisite_login, but we're on Drupal 6.
I've got the time/skillset to port it, but would prefer a proven solution over rolling my own.
thanks.
Ical feed
It might be overkill, but
It might be overkill, but consider using Domain Access instead of "true" multisite. It's made for sharing data, including user data, across sites in a smarter way than true multisite can provide.
Check this project out.
http://drupal.org/project/cas - CAS is a robust solution and will work across multiple drupal instances running against separate databases.
sharing the user and session tables
How about sharing the user and session tables across domains. You can have a separate user_role table for each domain. We have this kind of a set up in one of our projects http://www.papyrusclubs.com. We have individual school portals but a single user database. You can login from any of the domains and share session across domains.
Netlink Technologies Ltd
http://shyamala-drupal.blogspot.com/
thanks, I'm testing out a CAS solution now
We ended up tentatively going with a CAS solution, ie. looks promising, we'll explore to see if it meets the needs.
The initial pass looks pretty good, although depending on your desired workflow, you might not want users to be created automatically if they don't exist. Although in reality you just need to make sure you don't give inappropriate permissions to the Authenticated user role.
I'll report back as the project progresses.
-Dave
more integrated solution...
I don't know where you are in your dev cycle or if any of these sites are build yet BUT...
I was looking to a similar project that would allow users to create a site with a few wizard like steps. The users would be signed in system-wide but only experience one site. I was going to accomplish this using OGroups, making the individual group pages be the 'sites'.
I know if these various sites will be very different, this doesn't quite work. OGroups will offer quite a bit of customization through.
Just another option for ya.
SingleSignOn
There is also the Shared SignOn module, of course.
http://drupal.org/project/singlesignon
--
http://ken.therickards.com/