Single Sign On

From PlanetForge

Single sign-on (SSO)

This is an essential need for users of a forge : login into different (web) apps with the same "ID" once and for all during a work session, even if interacting with different tools assembled in the "same forge".

Different solutions :

• CAS (CentralAuthenticationServices)
• Kerberos, Widely used in various OS (Linux/MacOS/Windows), and applications (kerberos/NFS/FTP/SSH/Samba/Apache), but also by CAS as a delegation, 2 FLOSS implementations (Mit and Heimdal)
• NTLM, old Windows implémentation, now more and more replaced by Kerberos.

More generally, a single person may like to authentify to several forges with the same credentials, to avoid the hassle of having multiple identities, when participating to different projects hosted on multiple platforms.

Different solutions :

• Shibboleth
• OpenID
• Liberty
• ...

See also : UserRole