Way to single sign on between PHP, Python, Ruby applications

Question

There are one project using Python Django, another stand alone project using PHP. Both has it own user auth. module. What would be a simple way to merge user management together?

We start to check open source solution as CAS, cosign. It's a real concern that both used in campus/university, and not sure it would be good for web applications.

To initiate single sign on (SSO) between legacy applications, and some in future would be developed in Ruby. Who can suggest a good investment in SSO solution? A clear API, ready for web application and not too high hardware requirements would be good.

Answer 1

I would recommend using rubycas server - it's an implementation of Jasig's CAS in Ruby (a sinatra app). In my experience, it was easier to set up than Jasig's, and I found better clients for CAS than for SAML (though both are great solutions). It integrates out-of-the-box with ldap directories (including AD) and of course user records from a database.

Getting PHP apps to authenticate against a CAS server is easy with phpCAS, ruby/rails apps can use rubyCas client, and though I haven't used it, django-cas looks promising.

For legacy apps, or even just protected folders shared by Apache, you can also use the Apache module mod_auth_cas.