sso — lovingly known as the S.S. Octopus or octoboi — is the authentication and authorization system BuzzFeed developed to provide a secure, single sign-on experience for access to the many internal web apps used by our employees. It depends on Google as its authoritative OAuth2 provider and authenticates users against a specific email domain. Further authorization based on Google Group membership can be required on a per-upstream basis. The main idea behind sso is a "double OAuth2" flow, where sso-auth is the OAuth2 provider for sso-proxy and Google is the OAuth2 provider for sso-auth.
Features
- sso-proxy transparently re-validates & refreshes the user's session with sso-auth
- sso is built on top of Bitly’s open source oauth2_proxy
- Authentication and authorization system BuzzFeed developed to provide a secure, single sign-on experience for access to the many internal web apps
- It depends on Google as its authoritative OAuth2 provider
- Authenticates users against a specific email domain
- Further authorization based on Google Group membership can be required on a per-upstream basis
Categories
SecurityLicense
MIT LicenseFollow sso
You Might Also Like
Our computer monitoring software allows employees, field contractors, and freelancers to manually clock in when they begin working on an assignment. The application will take screenshots randomly or at set intervals, which allows employers to observe the work process. The application only tracks activity when the employee is clocked in. No spying, only transparency.
Rate This Project
Login To Rate This Project
User Reviews
Be the first to post a review of sso!