DEPRECATION WARNING
This documentation is not using the current rendering mechanism and is probably outdated. The extension maintainer should switch to the new system. Details on how to use the rendering mechanism can be found here.
EXT: 1 Click Login¶
| Created: | 2010-02-18T17:33:18 |
|---|---|
| Changed by: | Sebastian Gebhard |
| Changed: | 2010-09-30T13:18:09.740000000 |
| Classification: | oneclicklogin |
| Description: | The keywords help with categorizing and tagging of the manuals. You can combine two or more keywords and add additional keywords yourself. Please use at least one keyword from both lists. If your manual is NOT in english, see next tab "language" ---- forEditors (use this for editors / german "Redakteure") forAdmins (use this for Administrators) forDevelopers (use this for Developers) forBeginners (manuals covering TYPO3 basics) forIntermediates (manuals going into more depth) forAdvanced (covering the most advanced TYPO3 topics) see more: http://wiki.typo3.org/doc_template#tags ---- |
| Keywords: | openid, login |
| Author: | Sebastian Michaelsen |
| Email: | sebastian.gebhard@gmail.com |
| Info 4: | |
| Language: | en |
EXT: 1 Click Login - oneclicklogin
EXT: 1 Click Login¶
Extension Key: oneclicklogin
Language: en
Keywords: openid, login
Copyright 2000-2010, Sebastian Michaelsen, <sebastian.gebhard@gmail.com>
This document is published under the Open Content License
available from http://www.opencontent.org/opl.shtml
The content of this document is related to TYPO3
- a GNU/GPL CMS/Framework available from www.typo3.org
Table of Contents¶
`Introduction 3 <#__RefHeading__598_134771385>`_
`Users manual 4 <#__RefHeading__604_134771385>`_
What OpenID provider should I choose? 4
How do I enable myself for oneclicklogin? 4
How do I log in using oneclicklogin? 4
`Administration 5 <#__RefHeading__608_134771385>`_
`Configuration 6 <#__RefHeading__612_134771385>`_
`Forge 7 <#__RefHeading__920_134771385>`_
`About 8 <#__RefHeading__922_134771385>`_
Who is this Sebastian Gebhard guy, Kasper is talking with in the podcast? 8
Introduction¶
What does it do?¶
Starting position¶
Using OpenID has some advantages in terms of security, maintainability and convenience but it can be quite unhandy for BE users to fill in their OpenID identifier every time.
How to make the login even faster and more convenient¶
- Oneclicklogin gives you the possibility to show you user's names below the login form. With a single click on a name you will be logged in using the OpenID identifier of that user. So if you're already logged in at the OpenID provider you'll be in the Backend with a single click
- Of course you can limit which users will be shown in the login form and also use devIPmask to hide the functionality from the public.
Screenshots¶
Users manual¶
What is OpenID?¶
OpenID is a Single Signon technique which can give you access to different websites and applications with just one OpenID Account. Example: You register an OpenID Account at a certain OpenID Provider. Your identifier will be an URL and might look like http://yourname.youropenidprovider.org.
Now you register yourself on website which has OpenID Support. Instead of giving a login name and password you just provide your OpenID identifier. The identifier itself is not a secret, so you don't have to share a private thing like a password with the website you want to register at.
When you want to log in, into the page you just give your identifier. If you're already logged in at your OpenID Provider everything will happen in the background and you will jut be logged in. Otherwise you'll have to sign in to your Provider once. For more technical details see http://en.wikipedia.org/wiki/OpenID
For TYPO3 that means that you as a User can store your OpenID identifier in the database instead of a password (if the admin enabled this option). At the login you just fill in your Identifier and no password. For details on OpenID usage with TYPO3 consult the manual of the openid System Extension.
What OpenID provider should I choose?¶
Technically it doesn't matter which one you choose but it's crucial that you can trust that provider. I don't have a complete overview, but I made good experiences with https://www.myopenid.com/ but I'm sure there are also other good providers. In doubt: Google is your friend.
There's also the possibility to set up your own OpenID server (for you as a single user or for a company or organisation with multiple users).
How do I enable myself for oneclicklogin?¶
You need to provide your OpenID identifier in your user record. If you still don't appear on the login screen, check if the “Enable 1-Click- Login via OpenID” option is set. If you don't have that option, ask your admin to set it for you.
How do I log in using oneclicklogin?¶
Open the TYPO3 Login Form
Search for your name
Click on it
Easy huh?
Administration¶
Installation¶
oneclicklogin depends on the system extension “openid”, which is available since TYPO3 4.3. Install both extensions via the Extension Manager as usual.
A word on security¶
When you use this Extension without a devIPmask limitation you will disclose the names and OpenID identifiers of your BE users to the public. This should not be a real security problem, but it might give potential attackers a few more ways to try to attack your site. (He can try to hack each of the OpenID Accounts to gain access to your site.)
This is why you are encouraged to use the devIPmask feature if you have the possbility.
Configuration¶
Extension Manager Options¶
While you install oneclicklogin (and afterwards when you click on it in the Extension Manager list) you'll get to the Extension Manager Options of oneclicklogin:
use_devIPmask¶
Option
use_devIPmask
Data type
boolean
Description
If enabled there will be a check if a visitor matches $TYPO3_CONF_VARS[SYS][devIPmask] before showing the oneclicklogin. You can use this if you have a certain IP Pool for your BE Users.
Default
off
text_date¶
Option
text_date
Data type
string
Description
oneclicklogin uses the Login News feature of TYPO3. That requires each element to have a headline consisting of a date and a text. This option configures the “date” (which doesn't need to be an actual date).
Default
“Extension”
text_headline¶
Option
text_headline
Data type
string
Description
See above. This options configures the text of the headline.
Default
“1 Click Login”
Forge¶
Please use the forge page for feature requests and bug reports: http://forge.typo3.org/projects/extension-oneclicklogin
About¶
((generated))¶
Who is this Sebastian Gebhard guy, Kasper is talking with in the podcast?¶
The guy in the podcast ( http://castor.t3o.punkt.de/files/oneclicklogin.mp4 ) initially developed this extension.
Ah ok, and who is Sebastian Michaelsen?¶
It's the same guy ;) Shortly before the Developer Days 2010 I married and changed my name. Unfortunatelly I did not tell it to the organziers in time so I was Sebastian Gebhard at that event and Kasper put my old name into the video.
8