<blockquote>
  <p>Is there any way to implement this sort of SSO in a modular fashion in Craft?</p>
</blockquote>

<p>Yes.</p>

<p>I'm not aware of any LDAP plugin for Craft, yet, but OAuth has already been done (<a href="https://dukt.net/craft/oauth" rel="nofollow noreferrer">https://dukt.net/craft/oauth</a>).</p>

<p>See <a href="https://craftcms.stackexchange.com/a/486/57">here</a> for a bit on how you'd approach it.</p>

CC BY-SA 3.0
2014-12-03T23:30:52.583Z
2014-12-03T23:30:52.583Z
2017-04-13T12:51:00.200Z
Brad Bell
<p>Scenario:
I want to use Craft to build a community website for an organisation which uses LDAP and Google Apps. I'd like to users to be able to login to Craft Admin via their existing LDAP account (or via Google Apps OAuth, which is easier).</p>

<p>The ideal workflow would be something like this:
1. John Doe is a member of the community and requests access to the Craft site.
2. Admin user logs into Craft and adds John Doe as a new user with his SSO email address
3. John Doe can then login to Craft using his SSO login details (either via a custom front-end form, or directly via Craft admin).</p>

<p>Looking at the available Craft events &amp; hooks, this doesn't seem possible currently without hacking up the Craft internals.</p>

<p>My question: <strong>Is there any way to implement this sort of SSO in a modular fashion in Craft? Or, will it require extensive hacking of Craft internals in a 'brittle' fashion?</strong></p>

<p>Cheers,
Sam.</p>

<admin>
Does Craft support a custom authentication backend for Admin?
# Does Craft support a custom authentication backend for Admin?

(Asked by: username_0 on 2014-12-03)

Scenario:
I want to use Craft to build a community website for an organisation which uses LDAP and Google Apps. I'd like to users to be able to login to Craft Admin via their existing LDAP account (or via Google Apps OAuth, which is easier).

The ideal workflow would be something like this:
1. John Doe is a member of the community and requests access to the Craft site.
2. Admin user logs into Craft and adds John Doe as a new user with his SSO email address
3. John Doe can then login to Craft using his SSO login details (either via a custom front-end form, or directly via Craft admin).

Looking at the available Craft events & hooks, this doesn't seem possible currently without hacking up the Craft internals.

My question: **Is there any way to implement this sort of SSO in a modular fashion in Craft? Or, will it require extensive hacking of Craft internals in a 'brittle' fashion?**

Cheers,
Sam.

**Tags:** admin


---

## 1 answers

### Answer by username_1 on 2014-12-03. Score: 2

> Is there any way to implement this sort of SSO in a modular fashion in Craft?

Yes.

I'm not aware of any LDAP plugin for Craft, yet, but OAuth has already been done (<https://dukt.net/craft/oauth>).

See [here](https://craftcms.stackexchange.com/a/486/57) for a bit on how you'd approach it.


---

