Monday, May 11, 2009

SSO : oAuth Implementation (Planning Part I)

SSO : Single Sign On... Apaan tuh ??? "Single sign-on (SSO) is a property of access control of multiple, related, but independent software systems. With this property a user logs in once and gains access to all systems without being prompted to log in again at each of them. (Wikipedia)"...

Gw awalnya dah pake SAML (3 legs method) untuk auth-nye tapi mo diganti pake oAuth (2 Legs method)... Akan ada beberapa perubahan di sistem gw untuk mengaplikasikan metoda oAuth ini...
Berhubung kita punya sistem yang nyatu ma google... udah manfaatin aja method ini ke google apps engine-nya untuk meng-authentication web application kita... Processnya seperti ini deh...
  1. Get an instance of the OAuth store
  2. Add the server consumer_key and secret to the OAuth library
  3. Obtain an access token to the server
  4. Authorize the access token (exchanging it for a request token)
Yah gitulah kira2 auth process methodenye...

Untuk implementation testing gw dah siapain satu sub domain oAuth, sample DB, ma library scriptnya... tinggal cobain library n modifikasi librarynya... trus test implement ke salah satu web application untuk auth-nya... Ntar di laporkan lagi hehehehehehehe... (Discontinued)...

No comments:

Post a Comment