php ad 域 单点登录,如何使用Microsoft AD为内部PHP应用程序实施单点登录(SSO)？

所有你需要的是

mod_auth_sspi Apache模块。

样品配置：

AuthType SSPI

SSPIAuth On

SSPIAuthoritative On

SSPIDomain mydomain

# Set this if you want to allow access with clients that do not support NTLM,or via proxy from outside. Don't forget to require SSL in this case!

SSPIOfferBasic On

# Set this if you have only one domain and don't want the MYDOMAIN\ prefix on each user name

SSPIOmitDomain On

# AD user names are case-insensitive,so use this for normalization if your application's user names are case-sensitive

SSPIUsernameCase Lower

AuthName "Some text to prompt for domain credentials"

Require valid-user

并且不要忘记你也可以use Firefox for transparent SSO in a Windows domain：只需转到：config，搜索network.automatic-ntlm-auth.trusted-uris，并输入您的内部应用程序的主机名或FQDN(如myserver或myserver.corp .domain.com)。您可以有多个条目，它是一个逗号分隔的列表。