Sharing logins across Drupal sites - which module to use?

richlove - June 11, 2009 - 08:12

Hi

I am fairly new to the world of Drupal development.

I am working on a nature website of which there is another 'partner website'. My website and the partner website are both using Drupal 6. The sites are on different domains, different servers, different physical location and supported by different technical teams.

What both parties would like to achieve is the ability to share login ids between the two sites so that anybody who has created a profile and user account on one site can use this to login to the partner website.

I have done a bit of research and I am not quite sure what is the best route or module to use or if this is particularly easy to achieve. Here are some of the things that I have come across:

- Distributed authentication - this seems to be deprecated after Drupal 5 and seems to have security flaws
- Site Network module - this seems to be a copy of a module called 'drupal' and might do what I need... but may have security flaws.
- Web Services module - seems to offer some authentiction using OAuth... I am not sure if this will achieve what we need

We have OpenId logins running as well but this is something that is a separate approach to logins to the situation above.

Ideally we would like users who are logged in to one site to be able to click a link to a partner site and actually be logged in to the partner site as he or she arrives there from the original site. I am guessing that this might be quite difficult to achieve but if anybody has any ideas then that would be great.

The main issue is to enable user id/passwords from one site to be valid on the partner site.

Thanks in advance
Rich

re: shared login across Drupal sites

chrisgnicholas - August 2, 2009 - 21:40

I have a similar interest - and Drupal expertise. (I am coming from JBoss-land) I am working in the context of the new UN-SPIDER portal, as per: www.un-spider.org .

OpenID is clearly of interest for a lot of reasons, and I still must read through the 'Yadis' stuff, but .... one runs smack into the conceptual soup of consistency across sites, in terms of both roles and (particularly for nature sites!!) taxonomies.

These in turn will be presumed by any node content shared across sites, and/or interactions the "logged in" user will have there.

How, even at a conceptual level, would you envision this working?

best regards -
Chris Nicholas

 
 

Drupal is a registered trademark of Dries Buytaert.