CODEWITHSUNDEEP
phpmagentosingle-sign-ontokensilverstripe
UncleCheese
UncleCheese

Reputation: 1584

Using Magento as an SSO provider

I have two sites I want to be connected with SSO. One is a store, using Magento, and I would like this to be the "source of truth" that holds all the members and will handle the authentication. The other is a marketing site using a CMS (SilverStripe), and I would like it to persist the session when the user changes from one site to another.

My back-of-the-napkin thinking is that links from the Magento store to the marketing site will pass a token in the request, and the marketing site will be able to validate that token using some kind of endpoint in Magento.

Disclaimer: I have no experience with Magento.

Upvotes: 4

Views: 2785

Answers (1)

smartin
smartin

Reputation: 3047

You can build a SSO integration using the SAML standard

SilverStripe has a SP module, Magento has 2 SP Modules (1) and (2)

Then you will need to connect both SPs with a simpleSAMLphp IdP that you may deploy, this IdP may use Magento or SilverStripe databases as authentication source.

See this video: https://www.youtube.com/watch?v=XKTRkSEyUIA

Notice: I'm the developer of one of the Magento SAML SP extension.

Upvotes: 5

Related Questions