A single account to log in multiple applications to Rails

Question

I am creating some applications using rails. All applications that use the paid auth plugin for the User base plugin and declarative authorization for authorization rules.

But I need to combine all the user accounts of the site into one user base to provide login for all sites.

Ie how 37signals works. Here is their work; http://37signals.com/accounts

How can I archive this, any suggestions are welcome.

Thanks A.Karr

Answer 1

From learning how 37signals did things - I think they use RubyCAS http://github.com/gunark/rubycas-server

It is ideal for single sign-on, single sign-on, and other related things - when you have several independent applications. In addition, since CAS is a common protocol, it exists for applications without rubies / rails. This way you can integrate legacy systems or client applications into Java, etc.

I began to create a set of practices on this subject here: http://rubyglasses.blogspot.com/2009/12/rails-single-sign-on-with-rubycas.html

Answer 2

Have you thought about using an open id?

If all applications work in the same domain, you should not have problems accessing the cookie for authentication in all applications, but you need to save the authentication state somewhere where all applications can access it.