domain_sso

Component ID

2021125

Component name

domain_sso

Component type

module

Maintenance status

Development status

Component security advisory coverage

not-covered

Component created

Component changed

Component body

This module enables cross-site Single Sign-On (SSO) for Domain Access sites.

It's as simple as enable the module and done.

It is not only a Single Sign-On module, but also a Single Sign-Off module. When people click on the logout link, they are also logged out on all sites, just like when they login to the site, they are authenticated to all enabled and assigned domains.

We use the 'assigned domains' for a user to determen all sites the user needs to login to. So yes, the user needs to be assigned to a domain, before the user is able to 'SSO-login/logout' on it.

Domain SSO started out as a fork of the Internationalization Single Sign-On module, but is already a bit more ahead by now and we only just started.

More ideas:
- Configuration options. (but it does work neat already)
- Some more options / tune in to the domain access module. (add some config options to the domain access config / and use some more domain access functionality).
- Something to enable SSO via SSL via a config option.

For the long term: see if we can hook into the session table and not login on all sites individualy, but that' really not on the 1.0 planning.