Single sign-on implementation

[bcalder]

Under the Advantages Of Our OpenVPN Access Server it speaks about Single sign-on capability. Specifically it states:

By using custom authentication modules it’s possible to implement single-sign on, where signing into the VPN automatically pre-authenticates the web applications that end-users need to access through the VPN.

Can anybody point me toward information on how to implement?

[novaflash]

Hello bcalder,

No, because it would require custom code for whatever applications you use.

But these days, single sign-on is seen more popularly with SAML and Oauth and such. And SAML support is being developed, perhaps that will then meet your requirements more easily, as that is a generally accepted standard for single sign-on.

[mfasen]

Is there a beta for this or is there any upcoming? The OpenVPN AS beta page doesn't mention one.

We're looking into replacing OpenVPN AS in the next 12 months exactly for this reason, lack of SAML support. Unfortunately applications don't always implement this in a user friendly way so it will be interested to see how OpenVPN solves this.

If there's any upcoming beta programme for SAML support I'm more than willing to participate and give feedback.

[novaflash]

Good to know that you're willing to try out the beta, but we're not at that point just yet.