search

buzzfeed / sso

sso, aka S.S.Octopus, aka octoboi, is a single sign-on solution for securing internal services
MIT License
3.09k stars 186 forks source link

Auth for Multiple Domains #201

Closed dlmiddlecote closed 5 years ago

dlmiddlecote commented 5 years ago

Hi,

I was wondering whether there was any information or prior art to allowing auth to happen upon 2 domains within the same kubernetes cluster?

Do I just have to run 2 versions of sso, or is there a way to configure sso to support multiple domains?

weeco commented 5 years ago

Just put multiple domains separated by a comma into your email domain variable.

jphines commented 5 years ago

@dlmiddlecote Are you referring to proxy domains or email domains used for authorization?

As @weeco mentions, you can use commas to separate multiple email domains or the wildcard * to allow any domains.

dlmiddlecote commented 5 years ago

Hey @jphines I’m referring to proxy domains, i.e foo.com and foo.net, both of which will use the same google accounts to login.

jphines commented 5 years ago

@dlmiddlecote you can use a CSV separated list of domains to configure the env var for PROXY_DOMAINS

We use this configuration to specify proxy root domains such as: buzzfeed.com,tasty.co,buzzfeednews.com etc.

dlmiddlecote commented 5 years ago

Cool, I’ll try it out. Thanks @jphines