Open hexylena opened 9 years ago
Can you please elaborate on this? It is not clear (to me at least) what you mean by "REMOTE_USER type authentication"
@csnyulas absolutely, sorry about that, was out of office for a few days.
"Remote user" authentication delegates the authentication to an upstream proxy (e.g. apache/nginx) which send an email address in an HTTP header, usually the REMOTE_USER
header (though sometimes it'll be something else, e.g. HTTP_CAS_AUTH
). In the webprotégé case, this would mean auto-creating/auto-logging-in a user based on the header, and trusting the upstream proxy. For those of us using institutional authentication schemes (e.g. Jasig CAS/Shibboleth/LDAP), proxies like apache have support for those methods and let administrators switch freely between them. without requiring support for each method in webprotégé.
Thanks for the clarifications, Eric. This would be a nice enhancement, but looking at our current list of priorities, we probably won't get to it anytime soon. If Matthew disagrees, you may be in luck, though.
Unfortunately, a quick Google search for supporting REMOTE_USER authentication within a GWT project did not turn back any useful result that we could quickly implement. :(
No worries, definitely a wishlist/enhancement item! Thanks for the consideration.
Thanks for the clarifications, Eric. This would be a nice enhancement, but looking at our current list of priorities, we probably won't get to it anytime soon. If Matthew disagrees, you may be in luck, though.
Unfortunately, a quick Google search for supporting REMOTE_USER authentication within a GWT project did not turn back any useful result that we could quickly implement. :(
— Reply to this email directly or view it on GitHub https://github.com/protegeproject/webprotege/issues/242#issuecomment-79534485 .
I am surprised to see so little discussion about LDAP etc. But maybe we have to look at it this way: As long as webprotege does not allow to delegate authentication, you exclude a large share of professional/commercial organizations from your user base. On the other hand, if you do support it, it may be the entry ticket to a very broad and professional new user base for webprotege.
+1, we'd still love REMOTE_USER
support. We have just put off of real ontology work in the hopes of finding a solid, web-based, collaborative ontology editor. We've since moved from apache-ldap/kerberos auth to apache-cas, and this would still solve our problem :)
I have a new project where this would be helpful too. Nobody wants to manage user accounts on several different systems.
HI MAthew,
Integration with the enterprise authentication systems (AD, SSO etc.) will definitely required and hope this might have been done by now.. If not is there any plan to do the same in future for webprotege?
I'm hoping that we might get to this later this year, which will make it possible to support SSO.
Hi Mathew,
Really appreciate your response and hope you must be doing great..
We are trying to integrate Webprotege with a platform with single user authentication using JWT token based approach.
Since Webprotege had its own authentication and user credentials management and doesn't support external authentication, is it possible to disable the authentication and redirect user to project/ list page?
Or is there any other way to use JWT token based authentication?
Thanks in advance
Regards Anupam
Get Outlook for Androidhttps://aka.ms/ghei36
From: Matthew Horridge notifications@github.com Sent: Monday, January 11, 2021 4:32:29 PM To: protegeproject/webprotege webprotege@noreply.github.com Cc: anupam1050 anupam.dinesh@hotmail.com; Comment comment@noreply.github.com Subject: Re: [protegeproject/webprotege] Support for REMOTE_USER authentication (#242)
I'm hoping that we might get to this later this year, which will make it possible to support SSO.
— You are receiving this because you commented. Reply to this email directly, view it on GitHubhttps://github.com/protegeproject/webprotege/issues/242#issuecomment-757876936, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AC743WB4FMAHKMFEWVY3DPDSZLLELANCNFSM4A5NMQ4Q.
Enhancement: it would be great to support REMOTE_USER type authentication as an alternative to signup for those in enterprise environments.