[wp-edu] Lots of domains, single sign-in

[Casey Bisson]

If the only concern is in ensuring the logins are all https, then you could get a wildcard cert for *.domain.edu. They're more expensive than single site certs, but still cheap and much more useful. Godaddy sells them for about $200.

MU/3.0MS sets the login cookie so that it works across all blogs on that site/domain, so users won't have to repeatedly authenticate. 

If you want to force all log-ins to go through a single page at a well known URL, you might want to check out the work I did for my previous employer:

http://maisonbisson.com/blog/post/14110/wordpress-user-authentication-hacks/

There are some good reasons to send everybody through the same auth page, but I'd balance that against the effort necessary to make it work. Especially if a wildcard cert will solve your immediate problem (and won't hurt later if you decide to invest more time). 

--Casey Bisson

http://MaisonBisson.com
http://pro.GigaOM.com

On Nov 9, 2010, at 1:59 PM, "Muro, Matthew" <mmuro at advance.ua.edu> wrote:

> I would just get an SSL that is compatible for all of your domains and then enforce SSL on login.
> 
> http://codex.wordpress.org/Administration_Over_SSL
> 
> Matthew Muro
> Web Developer
> UA Office of Web Communications
> 
> 
> 
> 
> 
> On Nov 9, 2010, at 3:46 PM, Scot Hacker wrote:
> 
> On Nov 9, 2010, at 12:14 PM, Ha, Michael wrote:
> 
> Hi Scot,
> 
> So you are trying to avoid SSL certificate error by using a single
> sign-on?
> 
> I doubt it will work because after the user login and being
> redirected to the original domain dashboard (/wp-admin) the URL will
> be https without certificate. Right?
> 
> I know it's not ideal, but we would probably keep the wp-admins on
> http. It's the user/password credentials that really need protecting.
> 
> We're also looking into the possiblity of using a multi-domain cert -
> just need to make sure that's compatible with cPanel.
> 
> Thanks,
> Scot
> 
> 
> --
> Scot Hacker, Webmaster
> Knight Digital Media Center
> UC Berkeley Graduate School of Journalism
> http://kdmc.berkeley.edu
> http://twitter.com/kdmcinfo
> http://journalism.berkeley.edu
> 
> 
> 
> 
> _______________________________________________
> wp-edu mailing list
> wp-edu at lists.automattic.com
> http://lists.automattic.com/mailman/listinfo/wp-edu
> 
> _______________________________________________
> wp-edu mailing list
> wp-edu at lists.automattic.com
> http://lists.automattic.com/mailman/listinfo/wp-edu