The best approach to integrate accounts (SSO, SLO, provisioning) between orocrm and any other app is by providing to orocrm SAML support.
Since this is a PHP based app you have 2 open source alternatives:
– simpleSAMLphp
– php-saml
Adding orocrm SAML SP capabilities will let you be integrated with any SAML identity provider such us Onelogin, Okta, Salesforce, Ping, … SAML is standard and many companies adopting it so adding this feature to orocrm should be key for you guys in order to get some advantage over your CRM competitors.
You may review this open source SAML plugin for Symfony2 and use it as base of your implementation.
Optionaly, you can add to orocrm also Identity provider capabilities to let orocrm to be the authentication source for others apps.
The advantage of using SAML instead another tricky SSO mechanism is that this is standard and let you SSO between apps that are hosted in different domains. Also there are a lot of apps that already support SAML so adding those apps to your SSO federations is gonna be quite simple.
In this specific case, there is a SAML2 extension for Magento2 that allow you to Single Sign On, Single Log Out, Provision users on the fly (Just-In-Time provisioning), user data, role and address attribute mappings.
Once authenticated, you can use the Magento2 API.
If at orocrm there are no people with SAML knowledge you can contact me anytime and you will be able to outsource this task if interested.
Michael 5 years, 11 months ago.
