Our CRM vendor was not interested in providing a SAML IdP, so I modified this mod to work with their web service provider that was available for iMIS 15.
All our sites are on the same top level domain at nawcc.org, so we are using a cookie with a Guid to provide a handle on the current user session no matter which system the users are logged onto working.
I have the login and autoregistration working with our vBulletin 3.84 but I am wondering about the actual operational behavior.
In particular the product should recognize an IdP logged in user when they appear on the board by using a plug in at forumhome_start and/or error_nopermission.
I was thinking that the plug-in could see that the Guid cookie was there and valid but the vBulletin session cookie(s) were not there and perform the same autologin that is done when one logs on through the IdP. The current functions in function_samllogin and samllogin already are set up to do all the work. The only difference is that the process does not start with the bounce back url to the IdP.
We will be implemented this same feature with our Joomla site and with anohter php application for a classifieds and auction site.
We could spend a modest amount of money on this.
|