OpenID authentication with XNAT Desktop Client?

[Haroon Chughtai]

Hi XNAT folks,

We're looking into rolling out the OpenID Authentication plugin on a bunch of the XNAT instances that we manage (replacing a mix of LDAP for institutional accounts and database logins for external users).

However a potential sticking point we see with our users that we envision is friction in logging into the XNAT Desktop Client. So a couple of questions around that:

1. Am I correct in thinking that the only option available at the moment would be for users to create an alias token and use that to login to the Desktop Client?
2. And if so, are there any plans on integrating OpenID authentication flows with the Desktop Client?

Best wishes,

Haroon

[Rick Herrick]

Hi Haroon,

Sorry for the late response, I wrote this email the day after you sent your question but forgot to actually send it!

You are correct about logging in using alias tokens. We've discussed integrating other auth providers into the desktop client but simply haven't had the development resources to integrate the OpenID workflow into the application. It's fairly tricky because the authentication would happen on the desktop client, not XNAT, so that authentication workflow needs to integrate back to the actual XNAT server. Hopefully we'll be able to resume development on the desktop client sometime soon, but have no timetable for that just yet.

Rick Herrick 

Senior Software Developer

ri...@xnatworks.io

https://xnatworks.io | Find us on LinkedIn! 

--
You received this message because you are subscribed to the Google Groups "xnat_discussion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to xnat_discussi...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/xnat_discussion/5bbe43cb-f26e-41f5-90cd-11d42611d7den%40googlegroups.com.

[Haroon Chughtai]

Hi Rick,

No worries, and thanks for your reply and for confirming that the alias tokens would be the only route at the moment. Sounds like we may have to keep database accounts available for the time being. 

And yep, I can see how the integrating back is the tricky part!

Cheers,

Haroon

You received this message because you are subscribed to a topic in the Google Groups "xnat_discussion" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/xnat_discussion/tprP9aCdZ_E/unsubscribe.
To unsubscribe from this group and all its topics, send an email to xnat_discussi...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/xnat_discussion/CAFykhbCL-kj6xcuJ3RAB9YgL2P_hA6woVFVCK9p5VyU4-u5%2BXA%40mail.gmail.com.