Single Sign On | Turró.Org

Turró.Org BaaS has a self-hosted unique SSO method. Only affects BaaS users and the implementation isn't provided as standard. Developers can implement their own methods by using the IElephantSSO interface.

Relevant features

Keep me signed feature, substitutes the Remember me.
Keeps client signature across multiple sessions.
Users will be able to sign out remotely from multiple equipments.
Users will be able to track their activity.

Differences when using SSO

Password is never remembered when using SSO.
After three months of inactivity, SSO assertions will be removed and user forced to introduce the password.
Major changes on browsers may invalidate an SSO session. User wil be required to re-authenticate.
Live links became optional and no longer a default option.

The flow

Single Sign On will be fully deployed on March 19. In order to make it consistent with Live Links and to actually substitute them, changes will follow this roadmap.

March 2019	SSO substitutes current login system as default authentication system. The only SSO entry point will be the login form. Live Links will continue to work as expected.
April 2019	Publication Live Links will be substituted for normal links. Password reminder will direct to a new SSO entry point. Users will be able to check on how many devices are signed. Live Links will be removed for users with an SSO session.
May 2019	Live Links will be removed except for those explicitly set.

Single Sign On and Live Links are individually activated. BaaS owners can choose to deactivate one or both whenever required.