Hi, We have "single sign-on" web system here that authenticates users. Essentially, I can redirect users to an external login page and provide it with a callback to a "login succesful" page. I can then retrieve the user''s id on that page and continue. If I wanted to integrate that into Instiki, would I just create a new "LogonToOurSystem" controller and have a before_filter that would check to see if the user''s session contained the user''s single-signon ID, and if not would redirect to the external login page? Or would there be a better way to do it?
Joe Van Dyk wrote:>Hi, > >We have "single sign-on" web system here that authenticates users. >Essentially, I can redirect users to an external login page and >provide it with a callback to a "login succesful" page. I can then >retrieve the user''s id on that page and continue. > >If I wanted to integrate that into Instiki, would I just create a new >"LogonToOurSystem" controller and have a before_filter that would >check to see if the user''s session contained the user''s single-signon >ID, and if not would redirect to the external login page? > >Or would there be a better way to do it? > >That''s how I would go about it. Alex