Log into website from website - credentials

I have a webapp that saves the credentials (user & pass) for a website B. Is it possible to click on a link in A and have that sign me into site B in a new browser window?
For example: say A has my pinterest user & pass. If I click on a link in A that says "sign into pinterest" can that open a new windows and let me start browsing pinterest as if I signed in?

This is possible if the site in question gives you some sort of interface (like OAuth) to do that. You cannot just submit data for the user in the other website's regular login form. (assuming they have some CSRF protection, which they should.)

Related

SignIn with azure active directory using email and password on powerpages

I am working on a project using power pages, one of the client's requirements is that the home page perform the role of login page. So far so good, but it also requests that the only users that can enter the site are only users that belong to your organization, with this I thought of using azure ad. Power pages already comes with a button to be able to login with azure active directory. I need that from my form sending the email and password to carry out the same process as with the button.

Which security protocol do you use in OAuth if starting at Google?

Say you have a website www.site.come and you click 'Log in with Google', the google log in page shows up, you sign in and then directed back to www.site.com but now logged in as the proper user.
What protocol would you use if you started at Google? So for instance you start at google.com, log directly into google and as a logged in user, there exists a button which goes to www.site.com which when you click it will bring you to the www.site.com but signed in based on some information that is passed when the button is clicked. Would this be equivalent to SAML? Or more to OpenId?
It's OAuth 2.0. You can test it with https://developers.google.com/oauthplayground/

Kentico - Password Protect Content

I have some set of documents and want to password protect them with one set of userid/password for each group of users. It's like this:
All users in group 1 can access domain.com/survey1/ with userid1/password1
All users in group 2 can access domain.com/survey2/ with userid2/password2
etc....
Outside of Kentico, I can go to the webhosting control panel and apply password to any folders.
With Kentico (global admin privilege, no backend/server access) I'm not sure if this is possible and if yes, how to do it. Thanks for your input.
Note: I've tried creating a custom login page using the Logon Form webpart; set the destination URL for the Logon Form to a landing page that lists links to the docs; then added the mentioned docs as subpages; added new user (userid1/password1) through Users app and also under Properties/Security. But this didn't work as expected.
Michelle, basically you want a group of user share a single username/password combination, right? Which is basically a "group" of people all use a single "user" account in CMS.
So first you setup user account like user1/pw1, user2/pw2.
Then in you content tree, go to /survey1 > Properties > Security > set it to requirement authentication. Then add user1 to have READ permission. Do the same for other folders.
Then in a different browser session which you are not logged in, try to hit yoursite.com/survey1, it should redirect you to a login page, once you login with user1/pw1, it should route you back to /survey1.
If you have created your own login page like /mylogin.aspx, then go to Settings application > Settings > Security & Membership > Content > Website logon page URL, and add that ~/mylogin.aspx there, so when visitor is prompt for login, it will be that page.

How to collect e-mail addresses from a click of a button?

My team and I are currently exploring different methods of collecting email addresses from our website visitors.
We want to do something cooler than a contact forms, and we really like the way quicksprout.com handles this and would like to do the same.
Where would I start to implement collecting email addresses through a couple clicks of a mouse via connecting our visitors through google plus api from our homepage? Is this possible to implement through a regular http static html site?
NO A server is needed in order to collect email addresses. At least in order to add them to a database. This can not be done using just a static html site.
Now, since a server will be needed, you can just access the emails like link (This also avoids a hassle with Same Origin Policy)
For example: Let the user login via google oauth, save the user related email in your database. fine
(if the user has saved its login data in its browser or is already logged into its google account in the used browser, this would be a mouse click only solution.)

SharePoint caches incorrect credentials

Every morning when i fire up my VM and IE (in my host OS) and go to my SP site it always logs me on automatically as DOMAIN\george which is a user I created for testing permissions.
So every morning after that I click "sign in as a different user" to sign in as my sys admin user instead and most days that is the only user I use. Any idea why george's credentials are being cached?
Part of "firing up my VM" is running a script that starts IIS as well as some services. I'm not entirely sure SharePoint is responsible for this, could very well be ASP.Net.
EDIT: I've already tried clearing my cookies.
Had a very similar problem! To solve it, go to 'User Accounts' under the Windows Control panel.
Navigate to 'Manage your network passwords'. Select the domain you wish to clear and select 'Remove'.
You should now have a clean login dialogue box and when you check the 'remember me' box, this will be stored as the login default for that domain.
I was able to remove the test login credentials using the User Account control panel applet in Windows 7
Open the Manage Credentials link.
Find the Sharepoint Login in the Windows Vault.
Expand the address for the site
Remove the test login for this site.
After doing this I am no longer prompted for the login and login as different user prompt.
Have you checked that there are no logins and passwords being stored by the browser? Assuming you are using IE, see this article on how to clear them.
If DOMAIN\george is same user ID you are logging in to the VM ? If that is the case try changing the Setting in IE that dictates what user name is send to the Server. Just go to Tools - > Settings - > Security and Click on Custom Level, scroll down to bottom and you will find User Authentication option Select the Prompt for User name and Password.
It could also be that you are using IE8, that caches my credentials as well it seems.
IE8 stores credentials for favourites it seems, don't ask me why. What you should do is log in as the needed user, then save a new favourite (or add it to the favourites bar by dragging it). Then use that link to go to your site.

Resources