This has to be ported to Drupal 7.
However first of all we'd need OpenID Provider ported to Drupal 7 (#983128: Drupal 7 port of OpenID Provider), then OpenID Provider AX and OpenID Relying AX. After that we can think about this module here.

Comments

paranojik’s picture

paranojik commented
Version: » 6.x-1.x-dev

I'm working on the port here.

xamanu’s picture

xamanu commented
Version: 6.x-1.x-dev » 7.x-1.x-dev
Status: Active » Needs review

I opened up a branch so we can work on this. I just committed your work, paranojik. Thank you.

Taxoman’s picture

Taxoman commented
Title: Drupal 7 port » Drupal 7 port of OpenID SSO provider
Category: feature » task

Nice if we can keep this issue open until the first alpha release surfaces on the project page.

mgifford’s picture

mgifford
he/him
Primary language English
commented

Where is this at now? Are there other modules that should be considered?

arosboro’s picture

arosboro commented

I have this branch setup in my dev environment and have contributed patches for 2 feature requests and one to resolve an issue.

Here are their links if you would like to review them:

#1733544: Add OpenID provider url to user's authmaps after login
#1733786: Option to remove openid login from user_login forms
#1733750: Redirect to /user/login if user is anonymous in hook_form_alter() for form_id openid_provider_form

The modules I have enabled are openid, openid_provider, xrds_simple, openid_sso_provider, and openid_sso_relying. I'm using a single drupal installation with organic groups and purl to serve content on different top level domains.

To do this I also wrote a patch for openid_sso_relying: #1730654: Allow openid_sso_relying to be used on provider with purl or domain_access

So far I have pretty thoroughly tested authentication from a relying party in the following scenarios:

  • User logs in from relying party while she is logged into provider
  • User logs in from relying party while she is not logged into provider
  • User logs in from relying party, but logs out of provider before submitting the form at /openid/provider

I have opted to make things seamless to the end user by hiding the OpenID login button on the provider end, and automatically adding their provider url to their account's approved OpenID list.

xamanu’s picture

xamanu commented

Thanks for the testing and report! It helps a lot. I started reviewing the issues and I'm working on the D7 port within the next two weeks to get a stable release out anytime soon.

aanjaneyam’s picture

aanjaneyam commented

I think there is only one module (http://drupal.org/project/openid_provider_ax) left that does not even have a D7-dev version and that is preventing an Openid SSO setup totally in D7. I think according to http://groups.drupal.org/node/155799#comment-522029 openid_provider_ax is the only important one left which I would need to use for attribute exchange. Is there currently a way to totally implement Openid SSO in D7 with attribute exhange. Thanks.

mgeurts’s picture

mgeurts commented

I'm looking for the same thing... A working provider_ax version. I've found the openid_ax_api module (https://drupal.org/project/openid_ax_api) which claims to provide the full ax api for both provider and client. I have just downloaded it, so i have not been able to make it work yet, but i decided it might point you in the right direction.

xamanu’s picture

xamanu commented

I worked the last days to get things closer to a beta version of all modules. The OpenID Provider AX had a 7.x-1.x dev version already but has not been made visible on the project page. I enabled it now and further committed updates to the OpenID Provider AX 7.x-1.x branch as well as to this module here: OpenID SSO Provider.

I have all together working and running with Drupal 7. It looks like we are coming closer. We should definitely do some testing, I still do expect some errors to occur.

@mguerts: The mentioned OpenID AX API module is a dependency for both, the OpenID Provider AX and the OpenID Client AX modules.

xamanu’s picture

xamanu commented
Issue summary: View changes
Status: Needs review » Fixed

A basic D7 port is available. Soon a stable release is planned to be published.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.