SSO for the admin area

Question

So, given 2 magento sites, and soon to be 3, I would like to implement some kind of SSO between the admin areas of the given sites. AD/Kerberos integration would be sweet, but any other option would be great to have (separate SAML provider, OAuth, whatever works to have the guys have the same user pass between sites and not have them to separately login in every admin area).

I haven't found yet any extension to do that, and I'm not sure where to start (I'm not a dev, but I would like at least to know what to ask from the devs).

Answer 1

Magento can be used as a OAuth server, but afaik only for the customer accounts.

But you can implement your own stuff. We hacked a few month ago a framework for this:

https://github.com/magento-hackathon/LoginProviderFramework

You may have a look on it.

Answer 2

For the admin area, if you want to provide SAML support you have 2 alternatives:

• https://github.com/pitbulk/magento-mod-onelogin
• https://github.com/opsway/magento-mod-onelogin

With the extension you will be able to deploy a Service Provider at Magento, and you will be able to connect it with any SAML Identity Provider (if you don't have any, you can use simpleSAMLphp) that supports AD, Kerberos or Oauth as authentication sources.

This SAML extension for the admin panel is compatible with other SAML extension for the store, like http://cmsmart.net/magento-extensions/sixto-martin-saml-single-sign-on-magento-extension