[nycphp-talk] Single Signon Multiple Domains
Brian Dailey
support at dailytechnology.net
Mon Mar 26 18:37:17 EDT 2007
How do you know the session that moved from one domain to the other is
the same session? IP address?
CED wrote:
> Have a DB or filestructure(write a temp file) that stores the login info
> with particular authenticating information. Then whenever they move from
> one domain to another the Database is accessed and the login persisted.
>
>
>
> ----- Original Message -----
> *From:* Joseph Crawford <mailto:codebowl at gmail.com>
> *To:* NYPHP Talk <mailto:talk at lists.nyphp.org>
> *Sent:* Monday, March 26, 2007 5:10 PM
> *Subject:* [nycphp-talk] Single Signon Multiple Domains
>
> Guys,
>
> The company I am working for wants to have a single signon for
> multiple sites that will be on different domains. I know that you
> cannot use a cookie accross domains. Is there a way to do this
> aside from passing a hash via querystring or POST form?
>
> The reason I ask is because we cannot always rely on the hash being
> present. What if the user is at one domain then types in the other
> domain. We would want them to remain logged into the system because
> it is a network.
> I know it is possible just look at Google.com <http://Google.com>
> and Gmail.com <http://Gmail.com>.
>
> Any Ideas? Everything i read seems really insecure and ends with
> passing a querystring in your links.
>
> Thanks,
> --
> Joseph Crawford Jr.
> Zend Certified Engineer
> Codebowl Solutions, Inc.
> http://www.codebowl.com/
> Blog: http://www.josephcrawford.com/ <http://www.josephcrawford.com/>
> 1-802-671-2021
> codebowl at gmail.com <mailto:codebowl at gmail.com>
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
More information about the talk
mailing list