从PHP Web应用程序连接到本地/本地Active Directory [英] Connect to Local/On-premises Active Directory from PHP web application

问题描述

由于我真的很坚持这一点，因此寻求有关该主题的指导，我试图通过网络连接到Microsoft服务器，以通过提供我的Microsoft凭据登录到我的系统.

Seeking for guidance on the subject as I'm really stuck on this, I am trying to connect to a microsoft server over a network to login into my system by providing my microsoft credentials.

现在，我想要的是每当我尝试访问我的php应用程序URL时，它将重定向我到microsoft登录页面，并自动使用在系统登录过程中输入的microsoft凭据进行身份验证，并同时重定向回我的php应用程序相同的凭据.在这种情况下，我使用的是simplesaml.

Now, what I want is whenever I try to hit my php application url, it will redirect me to microsoft login page and automatically authenticates with the microsoft credentials entered during system login and at the same time redirect back to my php application with the same credentials. I am using simplesaml in this case.

我尝试将本地AD用作IDP，将simplesaml用作SP.当我点击应用程序URL时，它会将我重定向到本地AD登录页面，但自动登录未使用Microsoft凭据启动.我必须再次输入Microsoft凭据.请帮忙！！！

I tried using local AD as an IDP and simplesaml as an SP. When I am hitting my application url, it is redirecting me to my local AD login page but auto-login is not initiating with my microsoft credentials. I have to enter the microsoft credentials again. Please help!!!

推荐答案

通常的方法是将simplesamlphp与ADFS联合.

The usual way to do this is to federate simplesamlphp with ADFS.

然后，您将获得一个ADFS登录页面，并且如果您具有集成的Windows身份验证"，则将显示该页面.启用后，您将获得SSO，因此无需登录.

You will then get an ADFS login page and if you have "Integrated Windows Auth" enabled you will get SSO so you won't have to login.

这篇关于从PHP Web应用程序连接到本地/本地Active Directory的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！