Hi Bill, > We're looking into integrating SSO into dspace. We currently use OpenSSO. > > Our dsapace instance now uses ldap-login and password-login. We'd want > SSO for the ldap-login people. Ideally, instead of ldap-login, the > user would be redirected to our main OpenSSO login screen. > > I've seen some info on integrating Shibboleth and dspace - but none > with OpenSSO. > > If so, I'd appreciate any pointers on where to start, or to know > what's involved. > > http://developers.sun.com/identity/reference/techart/app-integration.html
This all looks extremely similar to how Shibboleth works, and you might actually find that the Shibboleth authentication method in DSpace will do what you need, with no or very little customization. If you deploy OpenSSO in a reverse proxy configuration (as shown on the page which you provided a link to), then it looks like OpenSSO will work in front of DSpace, hijack any applicable *-login requests, force the user through the login process (if not already logged in), and then send the user back to the application with some additional headers set to say who the authenticated user is. If you can get it working by setting headers of the authenticated user and passing these onto a demo script, then putting it in front of DSpace with the Shibboleth authN plugin should work. The Shibboleth plugin will then read these headers, and tell DSpace who is logged-in. Thanks, Stuart Lewis Digital Development Manager Te Tumu Herenga The University of Auckland Library Auckland Mail Centre, Private Bag 92019, Auckland 1142, New Zealand Ph: +64 (0)9 373 7599 x81928 ------------------------------------------------------------------------------ Forrester recently released a report on the Return on Investment (ROI) of Google Apps. They found a 300% ROI, 38%-56% cost savings, and break-even within 7 months. Over 3 million businesses have gone Google with Google Apps: an online email calendar, and document program that's accessible from your browser. Read the Forrester report: http://p.sf.net/sfu/googleapps-sfnew _______________________________________________ DSpace-tech mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/dspace-tech
