I have multiple web services that need to be integrated into one solution. One frontend would provide access to features from all services. Each of the services has its own native authentication, and keeps its own users' data. Services don't support OAuth or SAML. What I need to achieve is that when a user gets logged in, he can actually access all services with one central account. (However, each service needs to have corresponding user data).
When a user is created, he will have an account created in some central authentication service, as well as in all other services. So when the user authenticates against the central authorization service, it would be good if somehow the right credentials would be attached to requests to a certain service.
Lets say I have
- A - authentication service
- B - some service
- C - some other service
When a user is created/registered on A, accounts on B and C are automatically created (with the same password). When the user tries to access a resource on B or C, if not authenticated, he will be redirected to authentication. After the authentication is successful, the original request will have credentials attached for that service so that native authentication on the service B can be performed.