We launched new forums in March 2019—join us there. In a hurry for help with your website? Get Help Now!
    • 6705
    • 79 Posts
    Hi,

    Does anybody know if it is possible to configure MODx to be able to login to manager accounts using Cosign, in place of using the local MODx password associated with the username?

    (Or possibly rephrased more generally, is it possible to configure MODx so that it uses some form of external authentication for manager accounts rather than its own password?)

    Thanks for any advice (if I’d need to try to poke around the MODx internals myself, any hints as to where to start looking would be helpful!),

    David.
      Please don't PM me unless it's absolutely essential: if a technical question is worth asking, it's worth asking in public, so that others can share their experience, and so that all can learn from the answers.
      • 16834
      • 93 Posts
      hello

      I have only just discovered cosign and really like it.

      Did you ever get a response to this note?
      Did you ever find a solution to your problem? I have previously looked at hooking into an LDAP server and got nowhere...

      L
        • 6705
        • 79 Posts
        I didn’t get any responses, I’m afraid. At the time, it wasn’t an immediately-pressing feature for us, so it got left aside to look at again later (in the meantime, we’re just using normal MODx manager user accounts for users who need them, as we only have a few users at present).

        I think that the way to go forward would probably be:

        1. Have a special page set up so that when the user accesses the page they are automatically requested to login with Cosign.
        2. When the user is returned to the page after successful Cosign login, the page content would be a link to a MODx page.
        3. When the user accesses the link to the MODx page, the MODx page would contain code which extracts the user’s Cosign identity and matches it up with the corresponding MODx identity.. (there’s something involving gnomes and underpants involved here wink )
        4. ..and the above page then sets the user as being logged in.
          Please don't PM me unless it's absolutely essential: if a technical question is worth asking, it's worth asking in public, so that others can share their experience, and so that all can learn from the answers.