Skip to main content

This site requires you to update your browser. Your browsing experience maybe affected by not having the most up to date version.

General Questions /

General questions about getting started with SilverStripe that don't fit in any of the categories above.

Moderators: martimiz, Sean, biapar, Willr, Ingo, swaiba, simon_w

Single sign on accross multiple Silverstripe installs


Reply


3 Posts   667 Views

Avatar
lanks

Community Member, 61 Posts

30 November 2011 at 10:32am

I need to implement single authentication across multiple SS websites. These SS websites will be under the same URL, where each website is a sub-domain of the other.

Each of these websites will serve a specific purpose in terms of functionality so the subsites module doesn't provide what I need. I want to keep the databases for each website seperate.

Ideally I don't want to rely on external sources for authentication e.g. facebook or openid.

I am not sure what the best approach would be to implementing this. The desired design would be that users authenticate from one ss website which is like a gateway. Then from their they can navigate to the other websites without having to authenticate again at each website.

So if anyone has done something like this or has some ideas on how it could be implemented then please share.

Avatar
Tim Snadden

Community Member, 32 Posts

1 December 2011 at 7:17am

The external authentication module might be what you are after (https://github.com/hamishcampbell/silverstripe-auth-external). It supports a number of different authentication methods. You could set up basic authentication on a virtual host or directory on your web server and point the silverstripe instances there for authentication.

Note that authorisation still happens inside silverstripe.

Avatar
Tim Snadden

Community Member, 32 Posts

1 December 2011 at 7:44am

I've just another look at the module and it looks like it supports silverstripe authentication as well. So you could set up one instance as the authenticator and point the others there. I've only used basic authentication though.