More in this section

Forums / General Discussions / sitefinity integration with siteminder?

sitefinity integration with siteminder?

2 posts, 0 answered
  1. Mike
    Mike avatar
    1 posts
    Registered:
    11 Jun 2007
    21 Jan 2011
    Link to this post

    Our current environment:

    Our Identity and Access Management system is through another CA product call Siteminder which protects all of our existing sites.  It handles both authentication/authorization/single sign on.  It contains policy information which governs how sites are protected.  It has its own data repository which contains our users, roles, and resource protection policy.

     

    Our goal:

    We are currently looking at replacing our existing CMS.  We are looking at a number of possible replacements including SharePoint; but are interested in SiteFinity as well.  But we have the following requirements:

     

    The CMS must integrate with SiteMinder in respect to our data repository.  We don’t want to have to maintain two separate user/roles/policy stores.  My understanding is out of the box SiteFinity uses its own storage for security.  Below is excerpt from your site:

     

            Users and Roles in Sitefinity Database

                The following tables are used by the default Membership and Role providers in Sitefinity:

    • Telerik_Users - a table that stores Membership data for every user such as username, password, last activity date, e-mail, and so on
    • Telerik_Roles - a table that stores role names
    • Telerik_UsersInRoles - the table that holds the Users – Roles relation 

     

    Permissions are saved by role name in other tables. 

     

    We DO NOT want to have to duplicate the above information as Siteminder already has this storage.  Ideally, we want our CMS replacement to leverage Siteminder.  Our current CMS (Portal) has its own storage via sql tables and we’ve had to duplicate users/roles.  Our goal is to get away from this dual maintenance.

    has anyone had any experience with this?

  2. Georgi
    Georgi avatar
    3583 posts
    Registered:
    28 Oct 2016
    27 Jan 2011
    Link to this post
    Hello Mike,

    Thank you for your interest in our CMS.

    We can understand how you feel about duplicating the users and the roles - definitely not a good thing. In Q1, we will have wrappers of the users and the roles, so you can use the standard asp.net membership providers with Sitefinity. From there, you can just build a provider based on asp.net and siteminder, so you can have a single sign on. Right now, we are using Forms Authentication, so you can still have a provider which takes the users and the roles from your system, and authenticates them against Sitefinity. Sitefinity is entirely provider based, so everything that needs to be done is a custom provider for your data, that Sitefinity could fed up with.

    Regards,
    Georgi
    the Telerik team
    Do you want to have your say when we set our development plans? Do you want to know when a feature you care about is added or when a bug fixed? Explore the Telerik Public Issue Tracking system and vote to affect the priority of the items
2 posts, 0 answered