Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

This one is a doozy, so be forewarned! Also please let me know if this isn't on the correct site.

What I would like to implement in the form of a server appliance is a single sign on solution that would integrate with "cloud" apps such as or google apps. But I would also like this initial login to determine what websites the user can access. I really don't know the terminoligy that is involved with all of these things, so I will try to paint a picture step by step:

  1. User sits down at computer, opens website and is directed to a SSO login page (without logging in the user can't access any other sites, similar to a coffee shop).

  2. After logging in, the user is connected to a SSO portal with links to launch the various web applications. User can now access allowed websites.

  3. User logs out and now back at step one.

What I am trying to do is remove the network authentication from the computer and place it into the web browser, if that makes sense? The thought is less reliance on the operating system and local infrastructure, and more emphases on integrating the "cloud" services. I would like to either find similar software, or possibly start putting a group together towards a open source type project that could be built on linux?

I know this is off the wall, but if anyone could at least possibly name the technology or protocol that would be used in each step, it would be really appreciated.

Thanks, -Tim

share|improve this question

closed as not a real question by EEAA, Wesley, Zoredache, Ward, Lucas Kauffman Apr 11 '12 at 11:56

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center.If this question can be reworded to fit the rules in the help center, please edit the question.

Setup a thin-client, or system that opens a browser. Buy something like Stoneware Webnetwork, and setup a protal. – Zoredache Apr 11 '12 at 1:26

The Barracuda Web Filter product line allows Active Directory (or LDAP) authentication and can establish web access rules based on user/group memberships. This allows very granular rules. If the user is logged onto the Active Directory domain, the access can be transparent.

The portal you speak of can be an internal site or something you create. However, if you have specific links or sites that you will allow, just restrict the users/groups to those destinations.

Keep in mind that you can also create local users/groups on the appliance to govern access. Or you could have your directory server in the "cloud"...

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.