PHP Ldap AD - Recognize user data automatically without login

Question

I intend to make an application in PHP that does not need the user already beaten and password to login. As we have Active Directory here in the company, at first I thought to make the user when entering the link of the application, already appeared his data from AD.

It is possible to do this?

Answer 1

All you need is the Apache module mod_auth_sspi .

Configuration example:

AuthType SSPI
SSPIAuth On
SSPIAuthoritative On
SSPIDomain mydomain

# Set this if you want to allow access with clients that do not support NTLM, or via proxy from outside. Don't forget to require SSL in this case!
SSPIOfferBasic On

# Set this if you have only one domain and don't want the MYDOMAIN\ prefix on each user name
SSPIOmitDomain On

# AD user names are case-insensitive, so use this for normalization if your application's user names are case-sensitive
SSPIUsernameCase Lower
AuthName "Some text to prompt for domain credentials"
Require valid-user

And don’t forget that you can [use Firefox for transparent SSO in the Windows domain] (http://kb.mozillazine.org/Network.automatic-ntlm-auth.trusted-uris):

Go on about:config, search for network.automatic-ntlm-auth.trusted-uris, and enter the hostname or FQDN of your internal application (type myserver or myserver.corp.Domain.com).

You can have more than one input, it is a comma-separated field. Source: https://stackoverflow.com/questions/1003751/how-can-i-implement-single-sign-on-sso-using-microsoft-ad-for-an-internal-php