Authentication from another system

robleer

Hi,

Is it possible to login into AwareIM from another application?

To explain a little more: we have a website with some functionality, but we need some extra functionality. Aware can do the job, we we do not want to login into two systems. So, when a user is logged in into System A, then clicks a link and automatically logs in into the Aware Application.
Note: the user is not logged in into a Windows domain so we cannot use LDAP or AD. Lot of other systems have for instance a SOAP authentication or another trick to do this. What is possible with Aware??

Tia,

Rob

kklosson

See the User Guide section on Login (pg 82 in v6). You can pass login parameters: Business Space, Login name, Password, Testing Mode.

robleer

Hi,
Thanks for your answer.

No, that's not a safe way to do it. I do not want to send this information as a parameter in an URL.

Rob

tford

Hi,
Thanks for your answer.

No, that's not a safe way to do it. I do not want to send this information as a parameter in an URL.

Rob

kklosson's approach is the only way I can think of also.

If you build that URL string, you can encrypt it so it's a bit more secure.

aware_support

Encryption of the URL string is available out-of-the-box using a function, which name I cannot remember off the top of my head. 🙁

Also, if the other system is Facebook, Google or Twitter you can use automatic login from these systems - see the How To Guide

tford

Example of an encrypted link:

https://forum.awareim.com/d/8112>

hpl123

When talking about this, we current have B64 encrypt only and we have previously discussed hardening the encryption option so it´s a "real" encryption, anyone interested in hearing how much Awaresoft would charge to speed up getting this feature?

Thanks

robleer

@Aware support:

Not everybody has Facebook 🙂

Is it possible to make a login like the Twitter, Facebook, Google, but then against a Central Authentication Server (CAS)?
We use CAS for several other applications and that works fine. So, some kind of Custom CAS authentication agains a API we can build ourself? Shouldn't be a problem, because it works the same as the Google, Twit aso authentication.

BenHayat

I propose after the next version is out, Awaresoft to bump up the whole Authentication & Authorization system with the two phase authentication using the new security system Oauth 2.x and also expand the Email system with the new SMTP server per tenant.