Single Sign On
-
- Posts: 43
- Joined: Thu Mar 11, 2021 2:45 pm
Single Sign On
We are developing an application that will run on workstations. I am wondering if there is a way to have both OD client and application can use single sign on.
- jordansparks
- Site Admin
- Posts: 5770
- Joined: Sun Jun 17, 2007 3:59 pm
- Location: Salem, Oregon
- Contact:
Re: Single Sign On
Open Dental current supports SSO. We use it every day.
https://www.opendental.com/manual/singlesignon.html
https://www.opendental.com/manual/singlesignon.html
Jordan Sparks, DMD
http://www.opendental.com
http://www.opendental.com
-
- Posts: 43
- Joined: Thu Mar 11, 2021 2:45 pm
Re: Single Sign On
Looks like this uses windows domain services. Is there a way bridge or plugin can pass on the Identity to the 3rd party application without having to use windows domain services.
- jordansparks
- Site Admin
- Posts: 5770
- Joined: Sun Jun 17, 2007 3:59 pm
- Location: Salem, Oregon
- Contact:
Re: Single Sign On
I don't think we've built anything like that. I'm not quite sure how to go about it.
Jordan Sparks, DMD
http://www.opendental.com
http://www.opendental.com
-
- Posts: 43
- Joined: Thu Mar 11, 2021 2:45 pm
Re: Single Sign On
How about sending the user logged in ID, since the ID is unique the bridged application has access to OD database to use the passed ID for identification. No password involved and it's not necessary either.
This will help the bridged application use OD client as the primary application for logging in.
This will help the bridged application use OD client as the primary application for logging in.
- jordansparks
- Site Admin
- Posts: 5770
- Joined: Sun Jun 17, 2007 3:59 pm
- Location: Salem, Oregon
- Contact:
Re: Single Sign On
That seems like an easy field to add to program link command line arguments. Just remember that this would not be entirely secure, as long as that's not critical. Someone could, in theory, write a program that spoofs OD, sending just the user ID across. Your app would successfully log in with that ID and no password. It probably doesn't matter, but just wanted to be clear.
Jordan Sparks, DMD
http://www.opendental.com
http://www.opendental.com
-
- Posts: 43
- Joined: Thu Mar 11, 2021 2:45 pm
Re: Single Sign On
I believe program links such as payconnect (merchant services) uses some kind of key to authenticate (coming from OD) and identify the client (if not user). If we can use that vehicle to add user identity, the bridges will have finer processing capability.
- jordansparks
- Site Admin
- Posts: 5770
- Joined: Sun Jun 17, 2007 3:59 pm
- Location: Salem, Oregon
- Contact:
Re: Single Sign On
A number of bridges do use a "user id" of some sort, but it's just a shared id for the whole office. You can make the id show up anywhere in your command line string that you want.
Jordan Sparks, DMD
http://www.opendental.com
http://www.opendental.com
-
- Posts: 43
- Joined: Thu Mar 11, 2021 2:45 pm
Re: Single Sign On
The shared ID (or the key) can validate the request is coming from authenticated (open dental client) source, then the user ID can identify the individual logged into the OD.
-
- Posts: 43
- Joined: Thu Mar 11, 2021 2:45 pm
Re: Single Sign On
Can you please add user ID to program link command line arguments.
- jordansparks
- Site Admin
- Posts: 5770
- Joined: Sun Jun 17, 2007 3:59 pm
- Location: Salem, Oregon
- Contact:
Re: Single Sign On
Got it. Yes, that would be extremely quick for us to add. It will be [UserName].
Jordan Sparks, DMD
http://www.opendental.com
http://www.opendental.com