[
https://issues.apache.org/jira/browse/USERGRID-567?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14496369#comment-14496369
]
ASF GitHub Bot commented on USERGRID-567:
-----------------------------------------
GitHub user snoopdave opened a pull request:
https://github.com/apache/incubator-usergrid/pull/224
External token validation (for UG Central SSO)
FOR REVIEW ONLY -- NOT READY FOR MERGE
New endpoint that allows Usergrid to use access tokens issued by a central
Usergrid SSO service.
https://issues.apache.org/jira/browse/USERGRID-567
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/snoopdave/incubator-usergrid master
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/incubator-usergrid/pull/224.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #224
----
commit 098355f8521a7528fe0fa44e9ce959f7c4c603d8
Author: Dave Johnson <[email protected]>
Date: 2015-04-13T15:24:53Z
First cut of Usergrid Central SSO feature, with tests.
commit c15fcc8cd04637c2cb45e390035520751295b77d
Author: Dave Johnson <[email protected]>
Date: 2015-04-13T20:47:39Z
Fixes to Usergrid Central SSO feature from manual testing.
commit 27757b3292c97af81ca8e38a93a0c949811ee362
Author: Dave Johnson <[email protected]>
Date: 2015-04-14T14:00:44Z
small refactor.
commit 9a8d5e07822c5bd856f2aea2ec87232ad8888307
Author: Dave Johnson <[email protected]>
Date: 2015-04-15T15:24:52Z
When provisioning a local user for a valid external token, create all
organizations listed in the user's Access Info object. Also: prevent Admin
Users from logging in when external token validation is enabled.
----
> Validate External Token for Usergrid Central SSO
> ------------------------------------------------
>
> Key: USERGRID-567
> URL: https://issues.apache.org/jira/browse/USERGRID-567
> Project: Usergrid
> Issue Type: Story
> Reporter: David Johnson
> Assignee: David Johnson
>
> The requirement is to have multiple Usergrid systems, each with its own
> Cassandra cluster, be able to authenticate Admin Users with one central
> Usergrid system -- giving Admin Users Single-Sign-On (SSO) across all of
> those systems.
> We can do this by adding just one new end-point to Usergrid.
> This Google Doc explains a complete design for "Usergrid Central SSO":
> https://docs.google.com/document/d/12kXgaYcB6L9JoTyRGn0ZHEMg3vL1LJDqvtnltIBDa1Y/edit?usp=sharing
> The design is based on earlier work by Ed Anuff and Nate McCall.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
