Single Sign On (SSO) Joomla with other System

Question

I've been searching over the net on how to make a Single Sign On Joomla 3.3 to work with a system that is based on Java. Both Joomla portal and java system are under the same server.

I need it to work when:

1. User login using their username and password from frontend joomla portal
2. After login, user can also access the the system without a need to login again

It can happen vice versa as well.

I've got LDAP configured and enabled however still could not get the SSO to work.

Also I have JMapMyLDAP plugin installed and configured and it works well with OpenLDAP. But SSO is not working.

Pretty much in stall now. Is there any idea?

Any advice?

Answer 1

The are several authentication plugins in Joomla. For instance: Authentication - LDAP plugin.

Lightweight Directory Access Protocol (LDAP) is a protocol designed to access directory systems over TCP/IP. Because of this various databases provide an LDAP interface such as Microsoft's Active Directory, Novell's eDirectory, as well as more dedicated LDAP solutions such as OpenLDAP.

Joomla! has had a native LDAP library, JLDAP Joomla 2.5 (changed to JClientLDAP in Joomla 3.x) and a native LDAP authentication plugin. This allows Joomla! to authenticate against LDAP systems out of the box: to configure, go to the Plugin Manager and enable and edit the Authentication - LDAP plugin.

Developer: LDAP from scratch http://community.joomla.org/component/zine/article/507-developer-ldap-from-scratch-sam-moffatt.html

You can use any of them, or create a new one based on the available source code.

Answer 2

We've never had much luck with Joomla's built-in LDAP support especially for SSO, and with due respect to @Anibal that community magazine article is six or seven years out of date and written for Joomla 1.5.4 and AFAIK didn't support SSO at all.

In the past we've used the JMapMyLDAP Tools for client intranets where they've had everything from OpenLDAP to Active Directory based systems. You can download the plugins from their website.

The documentation can be found here, the SSO Trouble Shooting page is here.

Update: I found this article for v1 of JMapMyLDAP Tools which is at least more recent than the 2007/8 article, albeit about Active Directory.

Answer 3

For SSO with JMapMyLDAP, once it's enabled in the plugin, make sure your sign-in page on the web server has at least basic authentication enabled. If your machine is not part of a domain or you don't have NTLM-IWA configured you'll get a a simple username/pass window.

For testing set JMMLDAP to 'force login'. Then when you login to the basic auth window you'll be automatically logged into the site.

Answer 4

Affiliation Disclosure: I am affiliated with the below company/product and my recommendation is biased by this fact.

You could use a miniOrange plugin.

There are solutions for SAML SSO, OAuth, and LDAP.

You can also search the Joomla Extension Directory (JED) for "miniOrange single sign-on solution".

Answer 5

Affiliation Disclosure: I am affiliated with the product/company recommended below.

If you want to work your flow of LDAP like this:

1. Establishing a session connection. The user establishes a connection to the server using an LDAP port. Request.

2. The user sends a query to the server, such as an email lookup. Response.

3. The LDAP protocol searches the directory for information and returns it to the user.

4. Completion.

I recommend the solution from miniOrange Inc Joomla's solution from Joomla LDAP team. They have multiple plans like for unlimited authentication as well as for Joomla role mapping and attribute mapping also.

You can ask them for a demo for testing the functionalities.

The product is compatible with Joomla 4 and PHP 8.

Support is also available for customization in your plugin.