My intention was originally to have it log into embedded forums, but I think the redirect is an issue.
Im not sure its possible across domains, unless Hugo can think of something.
Any nabble user 'coding genius' like to have a go? :)
Single sign-on (SSO) is conceptually pretty simple.
User hits domain1.com.
domain1.com sees there's no session cookie.
domain1.com redirects to sso.com
sso.com presents login page, and take credentials
sso.com sets session cookie for the user
sso.com then redirects back to domain1 to a special url (like domain1.com/ssologin)
the ssologin URL contains a parameter that is basically "signed" by the sso.com. It could be as simple as a base64 of encrypting the loginid using a shared secret key.
domain1.com takes the encrypted token, decrypts it, uses the new login id to log in the user.
domain1 sets the session cookie for the user.
© Camo's Reptiles