Single sign on (SSO) with Processwire

[mader-christoph]

Hi,

I'm currently planning to build my web applications with processwire and want to have SSO Support.

So my Situation is as follows:
I want my Main Website on my main domain. For example website.com.
Now I want to add web applications on subdomains. For example application1.website.com, application2.website.com
And all websites/applications should use the same users with the same roles.

So now my question is, what is best practice to do so?
Using processwire multi-instance (https://processwire.com/blog/posts/multi-instance-pw3/), if yes having all users in the main website or use a separate instance only for user management? Or save the user and session data in a separate database? Or something i didn't think of?

Regards, Chris

Edited November 26, 2019 by mader-christoph

[Zeka]

@mader-christoph

Sorry, but I don't have anything to say regarding your question, but there are several related threads^

 

[androbey]

Same as  @Zeka I only have a related info (in this case a module). 

This would involve some (a lot) more work, since you would have to build your Idendity Provider (IDP) yourself, but may still be worth to check it out.

https://modules.processwire.com/modules/saml-auth/