Author Topic: Single Sign-On across multiple domain  (Read 309 times)

Offline Murzim

  • Game Owner
  • Level 14
  • *
  • Posts: 107
  • Reputation: +1/-0
    • View Profile
Single Sign-On across multiple domain
« on: December 23, 2011, 09:55:17 AM »
Hi all,

I recently got my hands on HybridAuth (I see Chris already uses it) and I thought to post here what I am trying to do, in case someone has already been through it.

What I want to create is something like this:
http://imageshack.us/photo/my-images/215/loginsystem.gif/

The most important aspect, is that the Server 1, will be the main server where players will be able to link/unlink accounts found on the rest servers (This is important as these servers already run with old login system, one per server).

Users will login to the main server and through simple clicks, they shouldl be able to login securely to each of the rest servers but also create accounts to them or link accounts from them or unlink accounts. There must be one account ID at the server 1 where all rest user id from various other servers will be linked.

I have thought of quite many ways but I am unsure of their security. I did some research and I read that I will have to use https. What I am looking is also widely known as SSO. Still uncertain.

I am using PHP/MySQL and I have found this http://www.jasny.net/articles/simple-single-sign-on-for-php/
However it does not seem to have any updates the last 2 years so it does not look promising.

Is it possible to use a google api for this type of chore ? Like registering my game as an app, get the secret app and id, spread across the servers and somehow achieve it ?

Anyone aware which is the best way to implement this ?
« Last Edit: December 23, 2011, 09:57:25 AM by Murzim »

Offline Chris

  • Game Owner
  • Level 35
  • *
  • Posts: 2,217
  • Reputation: +28/-1
    • View Profile
Re: Single Sign-On across multiple domain
« Reply #1 on: December 23, 2011, 10:29:54 AM »
Sounds like a very bad idea to me. Each game/server should be completely independent. I tried to do it once (worlds per server) and I still regret it a lot.

Make one of your games an OpenID provider and use the standard protocol. You can then add a new button to HybridAuth "Login via MyOtherGame" :) Easy and can use standard solutions.

 


SimplePortal 2.3.3 © 2008-2010, SimplePortal