Active Directory 用户与 Rails 联合？
是否可以使用现有的 AD 用户在 Ruby on Rails 应用程序中对他们进行身份验证？更准确地说，这是目前的情况。
Rails 应用程序托管在 Linux 盒子上。目前 Brightbox 被用作托管提供商。 Rails 应用程序中只有内置的用户身份验证，我看不到让应用程序了解连接的 AD 用户的方法。
现在有一个相当大的客户，拥有数百名 Active Directory 用户。显然，他们希望用户登录而不为每个用户创建 Rails 应用程序帐户。所有已知的身份提供商（OpenId、Google、Facebook...）都别无选择。
我能找到做这件事的唯一工具是 Microsoft 的 ADFS2。但它看起来在 Rails 世界中并不真正有用。但这正是需要的。一种在 AD 和我的应用程序之间建立信任以信任外部 AD 用户的方法。
有什么想法吗？
Is it possible to use existing AD users to authenticate them in a ruby on rails app? To be a bit more precise here's the current situation.
A rails app is hosted on a linux box. Currently Brightbox is used as hosting provider. There's only built in user authentification in the rails app and I can't see a way to make the app aware of connected AD users.
Now there's a rather big customer in spe with hundreds of Active Directory users. Clearly they want to have their users logged in without creating a rails app account for each. All the known idendity providers (OpenId, Google, Facebook...) are no alternative.
The only thing I could find doing this stuff is Microsofts ADFS2. But it looks like not really usable in the rails world. But that's exactly needed. A way to establish a trust between AD and my app to trust the external AD users.
Any ideas?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
ADFS 需要在客户端使用某种 web.config。
您可以保护 Rails 应用程序。与另一个 Access Manager 产品 (OpenSSO / OpenAM) 一起使用。请参阅将应用程序与 OpenSSO 集成。
或者，您可以向 Rails 添加一个“相似”的 WIF 插件（如果有这样的猛兽），它需要处理 ADFS 识别的 WS-Federation 或 SAML 协议。
ADFS requires some flavour of web.config on the client side.
You could protect the rails app. with another Access Manager product (OpenSSO / OpenAM). See Integrating Applications With OpenSSO.
Or you could add a WIF "lookalike" plugin to Rails (if there is such a beast) which needs to handle either the WS-Federation or SAML protocol that ADFS recognises.
看看我的雇主 Ping Identity 出售的 PingFederate。你很快就会完成。它使这种集成变得非常简单和安全。
Have a look at PingFederate which is sold by my employer, Ping Identity. You'll be done in no time. It makes this sort of integration very simple and secure.