ckanext-simplesso

A CKAN extension that enables single sign-on (SSO) on your CKAN site using simple HTTP headers in the request.

Installation

ckanext-simplesso has been tested against CKAN 2.4.1.

To install, activate your CKAN virtualenv and then do:

git clone 'https://github.co/jorabra/ckanext-simplesso.git'
cd ckanext-simplesso
pip install -e . (or alternatively equivalent) python setup.py develop

Then add 'simplesso' to the ckan.plugins line in your CKAN config file, for example:

ckan.plugins = resource_proxy stats datastore simplesso

Also make sure you have ckan.simplesso.header_parameter and ckan.simplesso.email_domain set correctly in your config file, for example:

ckan.simplesso.header_parameter = my_header_parameter_name
ckan.simplesso.email_domain = my_email_domain

Finally, restart your web server.

Notes

CKAN default user management pages lets users change both username and email. The plugin uses username to establish if SSO user already has a CKAN account.
Note that usernames "must be purely lowercase alphanumeric (ascii) characters and these symbols: -_". The plugin handles this only by lowercasing the username.

TODO

Handle SSO usernames with all kinds of symbols that CKAN doesn't support.
Remove all register, login and logout functionality if the use case is to only accept SSO users and anonymous users.