Single Sign-On Implemented
March 27th, 2008 — Jeremy.ByrneThe AussieInnovation.com website is constructed from several different packages, each carefully selected as best of breed. Although this does involve some integration pain on our part, it will create a much more powerful piece of infrastructure for the community to use. We have recently integrated yet another package, the Central Authentication Server (CAS).
CAS allows us to store all of your login details in a single central database (actually, LDAP as discussed previously) and then only have to sign onto the website once. That’s the tricky part. Under normal circumstances each of the different web tools that we’re using requires you to log in using its own arcane system; our changes not only centralise this but also encrypt your username and password. (Hopefully you’re using a password for this website that’s different to the one you use for, say, your online banking, but it’s good practice to never transmit user/pass pairs in clear text—so we don’t.)
We are still rounding out a few sharp corners and making sure that all of the wiring is tucked away neatly, so if you notice something untoward, please report the bug on our contact page. However, everything works so there is no reason for you not to jump in and start contributing to our discussion on the National Innovation Review, suggest an idea that should be considered or add your previous or new submission to the wiki.
Jeremy Byrne’s AussieInnovation weblog