DreamSpark SSO

Introduction

This is the original source code which poweres DreamSpark SSO service. The main purpose of the project being opensourced is to showcase how easy it is to develop applications upon Office 365 and Azure. In production environment, you should be using the hosted service instead of running your own.

Technology Used

The project is written in PHP, we use Slim Framework as our base. The whole project is hosted on Microsoft Azure. Single Sign On and connection to Graph API is provided by oauth2-azure module. We make use of Azure Table Storage (through Azure PHP SDK), for user interface we use Office UI Fabric and App Chrome. Application Insights are used for application monitoring. We also make use of CloudFlare which provides us with caching, SSL and many more.

Setting up your own

If you would like to contribute to the development, you are probably interested in how-to run your own copy:

1. Deploy the source code to Azure or any other provider of your choice and run composer install (if you are using Azure Web Apps, you can use the Composer extension to automatically handle Composer automatically when deploying from Git)
2. Create a multi-tenant application in your Azure Active Directory and add the following permissions:

• Delegated Permissions
  • Access the directory as the signed-in user
  • Read directory data
  • Sign in and read user profile
• Application Permissions
  • Read directory data
  • Read and write directory data

3. Configure application through the environmental variables
4. Create a new storage account and add the connection string into the Web App (name: Storage and create table organizationSettings)
5. If you set up everything correctly, the application should work just fine.
6. In order for the applications to show in user's My Apps page, you should run the cron.php in intervals (use WebJobs - described below)

Environmental variables

Setting up WebJob

In the Web App, create a new WebJob. Create a batch file, name it run.bat and insert the contents below, then zip the file and upload it as scheduled WebJob to Azure. In our production environment, we run this job every 12 hours.

@ECHO off
cd "D:\home\site\wwwroot"
php cron.php

Application Flow

Application is designed to be granted with admin consent - upon first use so users don't have to consent to the application. After that something called installation happens which basically sets the tenant up in the Table Sotrage and prepares it for the first use.

Users get authenticated, authorized and then they are redirected to the DreamSpark Premium (upon successful login).

Administrators are authenticated, authorized and if then redirected to the application settings. They also have to be explicitely allowed to access DreamSpark Premium just like everyone else.

Contributing

Feel free to contribute to this repository - just create a pull request. If you found a bug or are having difficulties, create a new issue.

Support, Liabilities and Disclaimer

Please note that we don't provide any guarantees for this source code. This code is provided under MIT license. If you have any questions or would like to contact us, feel free to do so at [email protected].

© TheNetw.org s.r.o. 2015