how deal autentication of a lots of applications using a central application?

[_andrea.l]

In my office I have a lots of application.
In every application we have a login and a pw.
It is orrible!
How to deal the login at all application by a central "thing" that let you
to use one login and pw for all application?
Than you in advance,
Andrea.

[Malcolm Dew-Jones]

Re: how deal autentication of a lots of applications using a central application?

_andrea.l (andrea.lorizAN TISPAM@libero.i t) wrote:
: In my office I have a lots of application.
: In every application we have a login and a pw.
: It is orrible!
: How to deal the login at all application by a central "thing" that let you
: to use one login and pw for all application?
: Than you in advance,
: Andrea.

Are they applications on a web server? I.e. do you use a web browser to
access various forms and pages, and some set of forms and pages is what
you call an application?

One technique is to put all the apps within a directory tree that is
controlled by .htpasswd (or such like) and then remove the login
requirement of the individual applications. That way the user will login
once via the browser/htpasswd setups, and then access anything within that
tree.

Or, if they are in-house apps, then simply change the way the login works
in the apps. If you have centralized all the login via a call (e.g.
<?php
if (! are_we_logged_i n() ) die "not logged-in";
?>
then replace the login module in each app with a call to a common shared
login module. If the login requires a cookie, and if the cookie path
points to the root of the server, then all your applications on that
server can see (and potentially share) the same cookie.

Or, use a run a local proxy on each PC (perhaps proxomitron) to monitor
the application logins, and automatically fill in the login fields based
on which ever values are used in the first login screen. (I don't know if
proxomitron can do that, but it would be interesting to try.) The user
would need the same name and password for each app, and would need to run
the proxy on each PC (but that may be useful anyway, a proxy could help to
cancel popups etc.).

Or, some browsers (perhaps in conjunction with some applications) will
save the values of fields (including password fields). There might be
settings in your browser that would do that in this situation. Then you
would still see the screens but be able to login by just pressing submit
without having to type in the data each time.


$0.10


--

This programmer available for rent.