Hi Pablo,

As suggested Larry this can be like SSO implementation in one of sites
hosted by your Django server.

But this can be done in more simple way because all sites are hosted within
the same Django server.

Possible Workflow:
===============

Terms
--------
'SSO Site' - one of the sites which we should specify as main SSO server -
main(central) application.
'Some Site' - any other site hosted on the same Django project except SSO
site.

1. on Some Site user clicks 'Login'
2. SSO Site redirects user to soo view of SSO Site
3. sso view checks if user already logged in
4. if not redirects user on login page of SSO Site
5. sso view generates one time token and redirects user back on
authenticate view of Some Site
6. authenticate view checks for token and if token valid and user was
redirected from SSO Site retrieves user from that token and authenticate it
into current session of Some Site.

I did not not find any way how to login user to all sites in advance.
Session token stores in browser cookies and user authentication should be
finished on the page that belongs to Some Site. User should initiate that
login process either explicitly by clicking on 'Login' link or implicitly
by redirecting from view that require authorization.

For the same reason I did not find how to request SSO from the page which
is not belongs to domain for which user should be authenticated as you
asked below.

Does it make any sense to you?

Regards,
Constantine C.


On Wed, Jul 5, 2017 at 8:52 AM, Larry Martell <[email protected]>
wrote:

> On Wed, Jul 5, 2017 at 7:25 AM, Pablo Camino Bueno
> <[email protected]> wrote:
> > Hi Constantine,
> >
> > Do you know how to implement this? I'd need to login the user in a domain
> > that is not the one the view was reached from.
> >
> > Could it be building a custom authentication backend that somehow logs
> the
> > user in all the sites?
>
> Sounds like you are talking about Single Sign On (SSO). Google that
> and you will find many ways to implement that.
>
> --
> You received this message because you are subscribed to the Google Groups
> "Django users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> To post to this group, send email to [email protected].
> Visit this group at https://groups.google.com/group/django-users.
> To view this discussion on the web visit https://groups.google.com/d/
> msgid/django-users/CACwCsY4NSu72yie-56Dq%3DO0%3D%
> 2B_hL2iNHjmfefQFvY0v2CX_Bcw%40mail.gmail.com.
> For more options, visit https://groups.google.com/d/optout.
>



-- 
Sincerely yours,
Constantine C

-- 
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at https://groups.google.com/group/django-users.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-users/CAK52boXxw8zmF%3DM5ZD6KUJ1UUrtUkfGkh2F06AV1Yv7USUGhaQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to