How to build a secure Django single signon between different sites?

前端 未结 3 1772
北海茫月
北海茫月 2020-12-08 12:20

I want to integrate my Django web application with other web based products (most likely 3rd party non-django applications.) How can I let other sites sign in their users t

相关标签:
3条回答
  • 2020-12-08 12:22

    http://openid.net/

    There are other possibilities, but I wouldn't sweat over them because OpenID is used by lots of people and is the largest one of its kind.

    0 讨论(0)
  • 2020-12-08 12:33

    Never used it, but there is Django-sso.

    0 讨论(0)
  • 2020-12-08 12:42

    Some more ideas...

    OAuth

    OAuth for non-enterprise app. Django projects: django-oauth and django-oauth-consumer. Article: oauth in Django

    SAML

    Security Assertion Markup Language (SAML) is more for enterprise apps because it gives the "enterprise" more control over their own users and which of those users can access the app. This protocol is (was?) mostly driven by Google and friends (e.g. salesforce.com).

    Articles: SAML Single Sign-On (SSO) Service for Google Apps and Demystifying SAML.

    Python projects: PySAML and blog post

    Django integration: SAML with Django (not a complete solution... just a starting point. Uses PySAML)

    Information Cards

    IIRC Information Cards are the Microsoft universe equivalent to SAML. Python projects: Python Information Card Processing and Information Cards for Python. Nothing for Django as far as I know.

    --Edit--

    There is also CAS (User Manual) which can be integrated with django-cas.

    And two more SAML projects I had forgotten about: gheimdall2 and python-saml2

    0 讨论(0)
提交回复
热议问题