Single Sign On across different domains

Kentico Dev1 asked on November 12, 2018 21:49

We have two domains: www.mydomain.com which is not Kentico hosted and www.myotherdomain.com with is Kentico 10.

For additonal security and regulation reasons, our users will authenticate to a non-Kentico hosted instance of our website on www.mydomain.com. After a successful login they will be prompted with the optin to remain on www.mydomain.com or to be redirected to www.myotherdomain.com.

Assume that the userID (in this use case, email address) is unique and the same on both websites. Is Kentico able to support a redirect WITHOUT requiring the user to enter their credentials?

I found references to SSO, but only for the Admin area and domains hosted on the same Kentico instance...which is not our use case. The other looks to be Mixed Mode, but our current Kentico 10 envionment is not Active Directory as our users register with their own domain/email addresses.

Recent Answers


David te Kloese answered on November 13, 2018 09:02

Well since the Kentico doesn't know anything about the external domain it can't validate the authentication by itself.

So you'll be needing something custom. Do you have access to anything on the second server? As in can you customize code or add additional logic? Perhaps you can create a hook for Kentico to check if a user is logged on. Have a look at the documentation for managing external authentication and there is a link in there with code samples on how to handle custom external authentication. This should give you a starting point.

If that's not possible but you can add customization you could also let successful authenticated users be forwarded to your Kentico-domain with some additional unique and hashed parameters. And handle the check on your end. But since security is such an important topic and can have big consequences I would think about this carefully and consult with some security specialist before creating a custom authentication process.

1 votesVote for this answer Mark as a Correct answer

   Please, sign in to be able to submit a new answer.