sitefinity integration with siteminder? - Sitefinity - General Discussions

All Replies

Posted by Community Admin on 21-Jan-2011 00:00

Our current environment:

Our Identity and Access Management system is through another CA product call Siteminder which protects all of our existing sites. It handles both authentication/authorization/single sign on. It contains policy information which governs how sites are protected. It has its own data repository which contains our users, roles, and resource protection policy.

Our goal:

We are currently looking at replacing our existing CMS. We are looking at a number of possible replacements including SharePoint; but are interested in SiteFinity as well. But we have the following requirements:

The CMS must integrate with SiteMinder in respect to our data repository. We don’t want to have to maintain two separate user/roles/policy stores. My understanding is out of the box SiteFinity uses its own storage for security. Below is excerpt from your site:

Users and Roles in Sitefinity Database

The following tables are used by the default Membership and Role providers in Sitefinity:

Telerik_Users - a table that stores Membership data for every user such as username, password, last activity date, e-mail, and so on
Telerik_Roles - a table that stores role names
Telerik_UsersInRoles - the table that holds the Users – Roles relation

Permissions are saved by role name in other tables.

We DO NOT want to have to duplicate the above information as Siteminder already has this storage. Ideally, we want our CMS replacement to leverage Siteminder. Our current CMS (Portal) has its own storage via sql tables and we’ve had to duplicate users/roles. Our goal is to get away from this dual maintenance.

has anyone had any experience with this?

Posted by Community Admin on 27-Jan-2011 00:00

Hello Mike,

Thank you for your interest in our CMS.

We can understand how you feel about duplicating the users and the roles - definitely not a good thing. In Q1, we will have wrappers of the users and the roles, so you can use the standard asp.net membership providers with Sitefinity. From there, you can just build a provider based on asp.net and siteminder, so you can have a single sign on. Right now, we are using Forms Authentication, so you can still have a provider which takes the users and the roles from your system, and authenticates them against Sitefinity. Sitefinity is entirely provider based, so everything that needs to be done is a custom provider for your data, that Sitefinity could fed up with.

Regards,
Georgi
the Telerik team

Do you want to have your say when we set our development plans? Do you want to know when a feature you care about is added or when a bug fixed? Explore the Telerik Public Issue Tracking system and vote to affect the priority of the items

This thread is closed