Multisite, single sign-on sans openID....any pointers?

Posted by kanani on September 15, 2008 at 10:45pm

I've got a client who is looking at having around 50 or so multisites, all different domains, but would like allow either a single sign on approach, i.e. signin once and automatically be authenticated across all the multisites, or have the same user/pwd but have to sign in, using that across sites, with shared profiles.

Any, semi secure way to do this without using OpenID?

I've taken a cursor look at this module, http://drupal.org/project/multisite_login, but we're on Drupal 6.

I've got the time/skillset to port it, but would prefer a proven solution over rolling my own.

thanks.

Comments

It might be overkill, but

Posted by Garrett Albright on September 15, 2008 at 10:56pm

It might be overkill, but consider using Domain Access instead of "true" multisite. It's made for sharing data, including user data, across sites in a smarter way than true multisite can provide.

The Boise Drupal Guy!

Check this project out.

Posted by perrydillard on September 15, 2008 at 11:00pm

http://drupal.org/project/cas - CAS is a robust solution and will work across multiple drupal instances running against separate databases.

sharing the user and session tables

Posted by shyamala on September 16, 2008 at 3:36am

How about sharing the user and session tables across domains. You can have a separate user_role table for each domain. We have this kind of a set up in one of our projects http://www.papyrusclubs.com. We have individual school portals but a single user database. You can login from any of the domains and share session across domains.

Netlink Technologies Ltd
http://shyamala-drupal.blogspot.com/

Shyamala
Unimity Solutions

Shyamala: Did you need Single

Posted by spicyguy on February 9, 2010 at 9:27am

Shyamala:

Did you need Single Sign On to enable logins across domains? Can you give me more info on your setup?
Which tables you shared?

Appreciate your info!

thanks, I'm testing out a CAS solution now

Posted by kanani on October 9, 2008 at 2:37am

We ended up tentatively going with a CAS solution, ie. looks promising, we'll explore to see if it meets the needs.

The initial pass looks pretty good, although depending on your desired workflow, you might not want users to be created automatically if they don't exist. Although in reality you just need to make sure you don't give inappropriate permissions to the Authenticated user role.

I'll report back as the project progresses.

-Dave