SSO 与 Angular6 应用程序集成

Question

I am new to the Angular application. I would need to a suggestion to implement SSO Integration with Angular6 (SPA). I didn't get anything on the net for the complete tutorial.

Basically, I am a php developer and I did SSO integration with php applications. Since Angular6 is UI, I don't know how to manage the secret and redirection and other things with Angular6.

So It would be better if someone suggests me steps (or Github samples) to implement Angular6 & SSO Integration and what would be the best way to do that?

Answer 1

你可以使用iodc library => https://github.com/damienbod/angular-auth-oidc-client进行SSO认证:)

Answer 2

Single Sign-On (SSO) into Angular JS solution provided by miniOrange can be achieved by setting up JWT SSO . In this case, you can allow your users to Single Sign-On (SSO) into Angular JS by verifying Identity with your existing compliant Identity Provider . This is done using JSON Web Token (JWT) tokens , and it can be easily integrated with Angular JS built in any framework or language.

This step-by-step guide to set up SSO into Angular JS will help you furthermore: https://www.miniorange.com/angular-js-adfs-single-sign-on(sso)?utm_source=Stackoverflow&utm_medium=Stack&utm_campaign=AngularJS&utm_id=Socialbookmarking

Or you can contact info@xecurify.com to help you test or setup SSO into Angular JS.

Answer 3

Here is my way to integrate with multiple sso in my applications. Currently, i already integrated sso ( jwt, kerberos, saml2, ...)

We have an angular app and rest api ...

/front-end/sso/method 
( method can be saml, jwt, kerberos )

When user visit any font-end sso url, it will be redirected to rest-api to handle sign on:

/back-end/sso/method?callback=frontend-url

So all sso requests are also handled at server...

You can control/manage it easily with (php or java ...)

If success, we will redirect user to front-end url with a token. Token can be put in header to hide from eye of user.

/front-end/sso/method?token=abc

If fail, we will redirect user with error message

/front-end/sso/method?error=Invalid....

PS: i choose this implementation because i am in favor of back end language and don't want to show many information at front-end ( like saml configuration ... )