Rainloop-webmail: Question: Sending username/password

[johnlewisdesign]

Hi guys

Is it possible to send the username and password on the address bar? Reason being I want to try out autologin from my FileMaker Database via a web viewer so I can avoid the login screen.

Any help much appreciated - amazing app, thank you!

[RainLoop]

You can use RainLoop SSO (sign sign on).
https://github.com/RainLoop/rainloop-webmail/wiki/SSO-example

[johnlewisdesign]

Schamazeballs! Thanks :)

[AndrewSav]

This SSO thingie will only work on the same server, won't it? So you can't really do SSO with a different server this way, can you?

[johnlewisdesign]

I would imagine you could whitelist using a crossdomain policy.

[AndrewSav]

It's not about white-listing it's about the fact that shared info for the SSO stored locally. There would simply won't be the SSO Hash in the cache on a different machine.

[RainLoop]

This SSO thingie will only work on the same server, won't it?
So you can't really do SSO with a different server this way, can you?

Yes, RainLoop can.

1) Enable external SSO:

./data/..../config/application.ini

[labs]
allow_external_sso = On
external_sso_key = "super-puper-sso-key"

2) Get SSO hash by POST request:
http://yourdomain.com/rainloop/index.php?ExternalSso
with POST params:
SsoKey, Email, Password, Login (optional)

3) Redirect to webmail sso url

header('Location: http://yourdomain.com/rainloop/?sso&hash='.$ssoHash);

[AndrewSav]

Really cool! Thank you for that!

[aamirshakil]

It's not bypassing the login page. When i generate sso hash and redirect it to my server it is always redirecting me to the login page without bypassing it!