I would like to know what’s the best technique to do single sign-on in web sites. It means that if you enter in more than one website, you will be authenticated in a ‘transparent’ way. I’m using php + curl to set the cookies for the different sites, but i really would like to know if does exist a standard way to do it.
Share
For a standard secure way you need :
The mechanism is a little bit complex, it involves http redirects and secure authentication tickets. You will find detailled explanation on the CAS website (a popular java SSO server).
I recommend to read this page ‘CAS Java Client Gateway Example‘, especially the sequence diagram at the bottom of the page.