2 ms·

> 1. Getting different software to all play nicely from the users perspective. I can't even give my users SSO because most software doesn't accept reverse proxy

> 1. Getting different software to all play nicely from the users perspective. I can't even give my users SSO because most software doesn't accept reverse proxy authentication! It sounds like you're referring to something specific here but I'm not understanding. What kind of software doesn't play well with SSO? And what is reverse proxy authentication? Do you mean give users SSO as in give them an account on an SSO system like Google/Okta/LDAP or do you mean use SSO as authentication for a web app you're running? Even if in the latter case I still don't understand what you mean by reverse proxy authentication or what that has to do with SSO. (I've set up SSO on my apps before and I've run SSO auth servers.)

vorpalhex 5y ago
SSO is short for single sign on. It means users have only a single login across all the parts of the system. That can be something like "Login with Google" or it can be they just have a single local user account that works everywhere. A really efficient way to make SSO work is to allow a reverse proxy to do all the work. A reverse proxy is a webserver (such as nginx or traefik) which receives all incoming requests and then hands them off to the correct bit of software, such as Plex or Heimdall. Reverse proxies do lots of things but they help glue different pieces of software together. It allows you to have "http://plex.example.com http://plex.example.com" and "http://heimdall.example.com http://heimdall.example.com" on the same server as a for instance. You can also have the reverse proxy handle authentication. Users get redirected to sign in if they don't have the right cookie and when the proxy forwards their request it includes headers that give the username, email, etc to the underlying software. This way instead of both Plex and Heimdall having to support a bunch of different sign in options, user management, password resets, etc all that is done by the reverse proxy. Your software just has to trust the reverse proxy and get it's data from the headers.

vorpalhex 5y ago

SSO is short for single sign on. It means users have only a single login across all the parts of the system. That can be something like "Login with Google" or it can be they just have a single local user account that works everywhere. A really efficient way to make SSO work is to allow a reverse proxy to do all the work. A reverse proxy is a webserver (such as nginx or traefik) which receives all incoming requests and then hands them off to the correct bit of software, such as Plex or Heimdall. Reverse proxies do lots of things but they help glue different pieces of software together. It allows you to have "http://plex.example.com http://plex.example.com" and "http://heimdall.example.com http://heimdall.example.com" on the same server as a for instance. You can also have the reverse proxy handle authentication. Users get redirected to sign in if they don't have the right cookie and when the proxy forwards their request it includes headers that give the username, email, etc to the underlying software. This way instead of both Plex and Heimdall having to support a bunch of different sign in options, user management, password resets, etc all that is done by the reverse proxy. Your software just has to trust the reverse proxy and get it's data from the headers.