Free PHP framework/library for single-sign on / cr

问题:

I am looking for free (non GPL is better) SSO framework/library implementation or code samples.

There are many kind of SSO implementation. Sharing cookie, sharing session, one time token, associative accounts, etc, etc. (BTW, any good article compare them?)

Is there any keyword I should google and reuse before before I start to implement our own wheel.

I know OpenID, but which is too much and it is not our need. We rather keep it KISS. We just want share the credentials of user that could save users from another login form.

回答1:

After some googling I guess I found SSO is not the same as OpenID :)

Did some quick googling and found these:

• http://www.single-signon.com/en/home.html (GPL)
• https://github.com/jasny/SSO (public domain)
• http://share.ez.no/learn/ez-publish/using-a-sso-in-ez-publish
• http://simplesamlphp.org/
• http://www.yiiframework.com/wiki/135/single-sign-on-across-multiple-subdomains/

回答2:

Consider OpenAuth. It's what twitter uses, and it's gaining mindshare.

The principle behind it is that when you authenticate against a trusted third party, you are prompted by an auth page on the third party domain, so it's obvious to the user that you are logging in through them, hence the trust.

Facebook's third party login is very similar, where they show their login content in a lightbox or popup window.

Another common one is Kerberos http://en.wikipedia.org/wiki/Kerberos_(protocol)