74 lines
3.5 KiB
HTML
74 lines
3.5 KiB
HTML
|
|
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
|
|
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
|
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en"
|
|
lang="en" dir="ltr">
|
|
|
|
<head>
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
|
<title></title>
|
|
<!-- metadata -->
|
|
<meta name="generator" content="Offline" />
|
|
<meta name="version" content="Offline 0.1" />
|
|
<!-- style sheet links -->
|
|
<link rel="stylesheet" media="all" type="text/css" href="../../../css/all.css" />
|
|
<link rel="stylesheet" media="screen" type="text/css" href="../../../css/screen.css" />
|
|
<link rel="stylesheet" media="print" type="text/css" href="../../../css/print.css" />
|
|
|
|
</head>
|
|
<body>
|
|
<div class="dokuwiki export">
|
|
|
|
|
|
<h1 class="sectionedit1" id="cross_domain_authentication">Cross Domain Authentication</h1>
|
|
<div class="level1">
|
|
|
|
</div>
|
|
<!-- EDIT1 SECTION "Cross Domain Authentication" [1-43] -->
|
|
<h2 class="sectionedit2" id="presentation">Presentation</h2>
|
|
<div class="level2">
|
|
|
|
</div>
|
|
<div class="plugin_include_content" id="plugin_include__documentation:presentation">
|
|
<div class="level3">
|
|
|
|
<p>
|
|
<p><div class="noteclassic">For security reason, a cookie provided for a domain cannot be sent to another domain. To extend <abbr title="Single Sign On">SSO</abbr> on several domains, a cross-domain mechanism is implemented in LemonLDAP::NG.
|
|
</div></p>
|
|
</p>
|
|
<ol>
|
|
<li class="level1"><div class="li"> User owns <a href="../../documentation/current/ssocookie.html#sso_cookie" class="wikilink1" title="documentation:latest:ssocookie">SSO cookies</a> on the main domain (see <a href="../../documentation/presentation.html#login" class="wikilink1" title="documentation:presentation">Login kinematics</a>)</div>
|
|
</li>
|
|
<li class="level1"><div class="li"> User tries to access a protected application in a different domain</div>
|
|
</li>
|
|
<li class="level1"><div class="li"> Handler does not see <a href="../../documentation/current/ssocookie.html#sso_cookie" class="wikilink1" title="documentation:latest:ssocookie">SSO cookies</a> (because it is not in main domain) and redirects user on Portal</div>
|
|
</li>
|
|
<li class="level1"><div class="li"> Portal recognizes the user with its <a href="../../documentation/current/ssocookie.html#sso_cookie" class="wikilink1" title="documentation:latest:ssocookie">SSO cookies</a>, and see he is coming from a different domain</div>
|
|
</li>
|
|
<li class="level1"><div class="li"> Portal redirects user on protected application with his session ID as <abbr title="Uniform Resource Locator">URL</abbr> parameter</div>
|
|
</li>
|
|
<li class="level1"><div class="li"> Handler detects <abbr title="Uniform Resource Locator">URL</abbr> parameter and create a <a href="../../documentation/current/ssocookie.html#sso_cookie" class="wikilink1" title="documentation:latest:ssocookie">SSO cookies</a> on its domain, with session ID as value</div>
|
|
</li>
|
|
</ol>
|
|
|
|
</div>
|
|
</div>
|
|
<div class="level2">
|
|
|
|
</div>
|
|
<!-- EDIT2 SECTION "Presentation" [44-138] -->
|
|
<h2 class="sectionedit3" id="configuration">Configuration</h2>
|
|
<div class="level2">
|
|
|
|
<p>
|
|
Go in Manager, <code>General Parameters</code> » <code>Cookies</code> » <code>Multiple domains</code> and set to <code>On</code>.
|
|
</p>
|
|
|
|
<p>
|
|
To use this feature only locally, edit <code>lemonldap-ng.ini</code> in section [all]:
|
|
</p>
|
|
<pre class="code file ini"><span class="re0"><span class="br0">[</span>all<span class="br0">]</span></span>
|
|
<span class="re1">cda</span> <span class="sy0">=</span><span class="re2"> 1</span></pre>
|
|
|
|
</div>
|
|
</div><!-- closes <div class="dokuwiki export">--> |