Mailing-List: contact users-help@cloudstack.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@cloudstack.apache.org
Received-SPF: pass (nike.apache.org: local policy)
Message-ID: <53164AAB.7010509@niif.hu>
Date: Tue, 04 Mar 2014 22:50:35 +0100
From: =?UTF-8?B?RXJkxZFzaSBQw6l0ZXI=?= <fazy@niif.hu>
User-Agent: Mozilla/5.0 (Windows NT 6.2; WOW64;
 rv:24.0) Gecko/20100101 Thunderbird/24.3.0
MIME-Version: 1.0
To: users@cloudstack.apache.org, dev@cloudstack.apache.org
Subject: Re: SSO
References: <7C6EC4F4-C97C-4779-BCCC-1D8D93312864@um.es>
In-Reply-To: <7C6EC4F4-C97C-4779-BCCC-1D8D93312864@um.es>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit

Hello!

I recorded a jira feature request about this, but I make a workaround 
too - while sso would be implemented -, because I wanted to auth users 
with eduID.
My solution is a php based register page, which can be opened (from main 
login page) after we had successfull login on idP.
After that, the script split up the eppn, and check the domain part, and 
if it's not exist, make an api call, to add it.
The first part of eppn will be the username, which registred by an api 
call, and the script generate a random password, which will be sent by 
email.

If sb have account, they can also ask for a new password, and with some 
more api call, you can set up limits.

I know, it's not SSO, but enough to me. :)

Dear,
  Peter


014.03.04. 20:34 keltezéssel, María Noelia Gil írta:
> Hello, I am studying the operation of single sign-on in CloudStack. Does anyone can provide me information about this topic?
>
> I want to know if you can use SAML, OpenID, ..., and as it should be.
>
> Thank you.