search

sciencehistory / scihist_digicoll

Science History Institute Digital Collections
Other
11 stars 0 forks source link

Use SSO for staff logins #2564

Open jrochkind opened 3 months ago

jrochkind commented 3 months ago

Better UX for staff, also security advantages of using our SSO with all it's own security (ie 2FA/MFA etc).

Will have to figure out how to implement integration with our Microsoft SSO in our Rails app. Should be possible.

jrochkind commented 3 months ago

It looks like this might be kind of tricky for Azure SSO, although possible. It requires putting together a kind of tricky stack, involving some half-abandoned ruby gems. :(

See: https://github.com/heartcombo/devise/wiki/OmniAuth:AzureAD https://medium.com/committed-engineers/setup-azure-ad-oauth-2-0-with-ruby-on-rails-and-devise-39848e3ed532

If we are using an on-premises hosted AD, that might be an entirely different story too, not really sure.