Thread

We are developing a site that requires a paid subscription to access content.

Some of this content is on external partner sites which we are planning to display within an iframe.

We are looking at how best to automatically login the user to this external content.

Options include passing a token to the external site.

Does anyone have any suggestions or examples of using tokens to authenticate with external sites?

Many thanks

Mike

I’ve built a Facebook authentication module before that stores the user’s Facebook ID in a custom member field for later use. In my case the authentication is going the other way, but the idea is the same. You can store the token in a custom member field (make sure it’s not editable by the user if they go to edit their profile) and then use that field to pass in to the 3rd party service.

Thanks Jeremy that’s really helpful and a good starting point.

It makes sense to put it in with the member data fields. We can then look at how we pass it through to the third party site; perhaps via the url or a hidden field.

Thanks again

Mike

Great. If you’re talking about integration through an iframe, you’d normally pass a token in via the URL, just adding it on to the end of the src attribute.

Did you end up using the Entry API (http://devot-ee.com/add-ons/entry-api) module, or something from scratch?

Curious as we’re working on something over here that needs to do something similar! 😉