Single Sign On

This forum is for programmers who have questions about the source code.
Post Reply
SriramChellappan
Posts: 44
Joined: Thu Mar 11, 2021 2:45 pm

Single Sign On

Post by SriramChellappan »

We are developing an application that will run on workstations. I am wondering if there is a way to have both OD client and application can use single sign on.
User avatar
jordansparks
Site Admin
Posts: 5776
Joined: Sun Jun 17, 2007 3:59 pm
Location: Salem, Oregon
Contact:

Re: Single Sign On

Post by jordansparks »

Open Dental current supports SSO. We use it every day.
https://www.opendental.com/manual/singlesignon.html
Jordan Sparks, DMD
http://www.opendental.com
SriramChellappan
Posts: 44
Joined: Thu Mar 11, 2021 2:45 pm

Re: Single Sign On

Post by SriramChellappan »

Looks like this uses windows domain services. Is there a way bridge or plugin can pass on the Identity to the 3rd party application without having to use windows domain services.
User avatar
jordansparks
Site Admin
Posts: 5776
Joined: Sun Jun 17, 2007 3:59 pm
Location: Salem, Oregon
Contact:

Re: Single Sign On

Post by jordansparks »

I don't think we've built anything like that. I'm not quite sure how to go about it.
Jordan Sparks, DMD
http://www.opendental.com
SriramChellappan
Posts: 44
Joined: Thu Mar 11, 2021 2:45 pm

Re: Single Sign On

Post by SriramChellappan »

How about sending the user logged in ID, since the ID is unique the bridged application has access to OD database to use the passed ID for identification. No password involved and it's not necessary either.

This will help the bridged application use OD client as the primary application for logging in.
User avatar
jordansparks
Site Admin
Posts: 5776
Joined: Sun Jun 17, 2007 3:59 pm
Location: Salem, Oregon
Contact:

Re: Single Sign On

Post by jordansparks »

That seems like an easy field to add to program link command line arguments. Just remember that this would not be entirely secure, as long as that's not critical. Someone could, in theory, write a program that spoofs OD, sending just the user ID across. Your app would successfully log in with that ID and no password. It probably doesn't matter, but just wanted to be clear.
Jordan Sparks, DMD
http://www.opendental.com
SriramChellappan
Posts: 44
Joined: Thu Mar 11, 2021 2:45 pm

Re: Single Sign On

Post by SriramChellappan »

I believe program links such as payconnect (merchant services) uses some kind of key to authenticate (coming from OD) and identify the client (if not user). If we can use that vehicle to add user identity, the bridges will have finer processing capability.
User avatar
jordansparks
Site Admin
Posts: 5776
Joined: Sun Jun 17, 2007 3:59 pm
Location: Salem, Oregon
Contact:

Re: Single Sign On

Post by jordansparks »

A number of bridges do use a "user id" of some sort, but it's just a shared id for the whole office. You can make the id show up anywhere in your command line string that you want.
Jordan Sparks, DMD
http://www.opendental.com
SriramChellappan
Posts: 44
Joined: Thu Mar 11, 2021 2:45 pm

Re: Single Sign On

Post by SriramChellappan »

The shared ID (or the key) can validate the request is coming from authenticated (open dental client) source, then the user ID can identify the individual logged into the OD.
SriramChellappan
Posts: 44
Joined: Thu Mar 11, 2021 2:45 pm

Re: Single Sign On

Post by SriramChellappan »

Can you please add user ID to program link command line arguments.
User avatar
jordansparks
Site Admin
Posts: 5776
Joined: Sun Jun 17, 2007 3:59 pm
Location: Salem, Oregon
Contact:

Re: Single Sign On

Post by jordansparks »

Got it. Yes, that would be extremely quick for us to add. It will be [UserName].
Jordan Sparks, DMD
http://www.opendental.com
Post Reply