Ability to get to the my Site (www.mysite.com) without re-authenticating

Ability to get to the my Site (www.mysite.com) without re-authenticating

  • Hello,

    We are planning to implement single sign on using our telligent community site. 

    We should be able to get authenticated to 'www.mysite,com'  automatically with same credentials as community portal.

    How is it possible using telligent ? IS it possible to implement single sign on using telligent .

    Thanks,

    Faster Fene

  • Do you want to use an existing Telligent Community site as the membership source and allow other site(s) to use the same authentication? Or the opposite: you already have another membership store and you want your Telligent Community site to use that? Does your Telligent Community site use Forms authentication?

    If you Telligent Community site uses Forms authentication and ASP.NET membership and you want to use your existing Telligent Community's membership store in other places then there are a couple of options. First, the Telligent Evolution membership system is based on the ASP.NET membership provider. If you look in the web.config you will see the membership provider configuration nodes. If you look in the database you will see the familiar aspnet_* tables. So a simple way to share membership with another ASP.NET site is to use the ASP.NET membership provider and point to your Telligent Community database for the connection string. However, you want to be careful not to do too much membership administration from the other site, like renaming or deleting users. Additionally unless the other site's functionality is tightly tied into your Telligent Community site you will probably want the other site to use its own local Roles and Profile and just use Membership (authentication) from the Telligent Community database.

    A second option would be make use of the new OAuth client functionality added in Telligent Community 7.0. You could setup your www.mysite.com site to be an OAuth client of your Telligent Community site and allow users to authenticate directly through the Telligent Community site and sent back to your other site. You can setup roles and permissions specific to the OAuth client through the configuration in the control panel. Doing this will allow all membership administration to be done through the Telligent Community site. This route is also not just for Forms authentication or the ASP.NET membership provider either.

  • Hi Dan,

    Thanks for quick reply.

    Our telligent site uses  Form authentication and ''www.mysite.com' uses their own  custom authentication. APIs  . We are planning to authenticate user through their email ids.

    That means email id's should be same on both sites and when user login to Telligent site  user should have  ability to get to the ''www.mysite.com' without re-authenticating.

    Do you have any idea about it?

    Thanks,

    Faster Fene

  • If the two sites were using the same ASP.NET membership store, sharing the same domain name (like www.mysite.com and community.mysite.com) and both using Forms auth then it would work by making sure the sites use the same authentication cookie name and have the same machine keys.  

    The other option I mentioned about setting up the www.mysite.com site as an OAuth client for the Telligent site could also work and it would cover your requirement about not having to manually login on www.mysite.com once logged into the Telligent site. However the most likely scenario would be that users get a typical OAuth approval page: Do you want to allow MySite.com to act on your behalf" sort of thing. You could get around that part of it by using the Client Credentials authorization grant type but you would still somehow have to determine who the user is to be able to get an auth token through the Telligent site.  We do have new OAuth client functionality slated for the next release that doesn't require that acknowledgement page if the other site is a "Trusted" client, which in your case of it being two of your own sites it could be. But you would need to write some custom code to handle getting the access token from the Telligent site and then auto-logging them in on the www.mysite.com site.  

    Otherwise I think you're going to have to either look into some sort of single sign on system.

    In any case you'll have to write some custom code to perform this functionality. There is nothing OOTB to handle this. Our Services team could help.