Single Sign-on with a login plug-in

Introduction

If you are dealing with a Single Sign-on solution that Softadmin® does not support out of the box, you can still support SSO as long as the SSO-provider passes user data to the system's login page by writing a custom pre-login plug-in.

Methods of data transfer

Normal methods of passing data to the login page are

• Over the query string
• In a cookie
• In an HTTP header

Login data

Examples of user data are a one-time token that the login plugin can use to call a web service to get the actual user data, or a piece of user data signed with the SSO-provider's private key, that the login plugin can verify has not been tampered with.