ckanext-simplesso

A CKAN extension that enables single sign-on (SSO) on your CKAN site using simple HTTP headers in the request.

Installation

ckanext-simplesso has been tested against CKAN 2.4.1.

To install, activate your CKAN virtualenv and then do:

git clone 'https://github.co/jorabra/ckanext-simplesso.git'
cd ckanext-simplesso
pip install -e . (or alternatively equivalent) python setup.py develop 

Then add 'simplesso' to the ckan.plugins line in your CKAN config file, for example:

ckan.plugins = resource_proxy stats datastore simplesso

Also make sure you have ckan.simplesso.header_parameter and ckan.simplesso.email_domain set correctly in your config file, for example:

ckan.simplesso.header_parameter = my_header_parameter_name
ckan.simplesso.email_domain = my_email_domain

Finally, restart your web server.

Notes

• CKAN default user management pages lets users change both username and email. The plugin uses username to establish if SSO user already has a CKAN account.

• Note that usernames "must be purely lowercase alphanumeric (ascii) characters and these symbols: -_". The plugin handles this only by lowercasing the username.

TODO

• Handle SSO usernames with all kinds of symbols that CKAN doesn't support.

• Remove all register, login and logout functionality if the use case is to only accept SSO users and anonymous users.