Authenticate from Existing User Database

By: Summer Nguyen user 10 May 2018 at 5:56 a.m. CDT

7 Responses
Summer Nguyen gravatar
Dear Gluu, We have existing users in an old system that is running. We are expanding the service using another domain. Hence , SSO is required . I found that Gluu is perfectly , and I am reviewing Gluu . I have some questions : - is LDAP ( AD ,etc ) required in Gluu ? - How do I authenticate users that is in our existing database, in which password is hashed with salt . Do you have any recommendation for me to migrate to Gluu . Thank you
CentOS 7.4
closed

Answers

By Thomas Gasmyr Mougang staff 10 May 2018 at 7:25 a.m. CDT

Copy
Thomas Gasmyr Mougang gravatar
Hi Nguyen, > is LDAP ( AD ,etc ) required in Gluu ? YES, GLUU need a data source to keep identities data. > How do I authenticate users that is in our existing database, in which password is hashed with salt 1. Gluu provide a feature called "Cache Refresh" that can be use to copy/sync users data from one external LDAP source to Gluu internal data source. 1. Custom script can be wrote to create a corresponding users in Gluu and then your data source can be remove totally.

By Mohib Zico staff 10 May 2018 at 8:09 a.m. CDT

Copy
Mohib Zico gravatar
>> is LDAP ( AD ,etc ) required in Gluu ? As Thomas said... mostly yes. But if you do not have any userbase in any Active Directory or LDAP; you can just use your Gluu Server's LDAP to store user's information.

By Summer Nguyen user 11 May 2018 at 3:43 a.m. CDT

Copy
Summer Nguyen gravatar
Dear Thomas, Zico, Thank you very much . It seems that we don't have existing userbase in any Active Directory or LDAP . So, I am thinking about this approach : 1. Keep the current database in DBMS 2. Create an API from the current website that handle user registration and checking password. 3. Use Gluu for authenticating to the user and registration. 4. For User registration, I will call to my API for verification and registration after the registration process is working well on Gluu. 5. For User login , I will use Gluu to do authentication just like the passport_social script to Add / Update user information that I get from the API . Sound like a plan ? Do you have any more suggestion . Thank you

By Thomas Gasmyr Mougang staff 16 May 2018 at 1:56 a.m. CDT

Copy
Thomas Gasmyr Mougang gravatar
Hi Nguyen, A better solution is: 1. Migrate all users from your application to Gluu server 1. Remove registration/authentication from your application(gluu is design to handle authentication/authorization) 1. Then register your application in gluu as clients. Thanks, Gasmyr.

By Mohib Zico staff 16 May 2018 at 3:39 p.m. CDT

Copy
Mohib Zico gravatar
>> Keep the current database in DBMS 'Out-of-the-box' feature is not available to pull user's info from RDBMS.. just fyi.. >> Create an API from the current website that handle user registration and checking password. You might wanna check couple of custom scripts we already published for checking/updating passwords; might help you. [Here](https://github.com/GluuFederation/oxAuth/tree/master/Server/integrations) are those.

By Thomas Gasmyr Mougang staff 19 May 2018 at 2:01 a.m. CDT

Copy
Thomas Gasmyr Mougang gravatar
Hello Nguyen, Still need assistance?

By Thomas Gasmyr Mougang staff 22 May 2018 at 3:43 a.m. CDT

Copy
Thomas Gasmyr Mougang gravatar
Hello Nguyen, Closing this ticket for inactivity.

Post an answer