[rt-users] Multiple Authentication Schemes

[Stephen Turner]

> -----Original Message-----
> From: Tomasz Wlodek [mailto:tomw at bnl.gov] 
> Sent: Wednesday, November 29, 2006 10:24 AM
> To: Stephen Turner
> Cc: 'John Arends'; rt-users at lists.bestpractical.com
> Subject: RE: [rt-users] Multiple Authentication Schemes
> 
> And how do you deal with multiple user identities?
> 
> I mean: one and the same user can logon once using web 
> certyficate and 
> once using RT password. How do you tell that this is the same 
> user and 
> uses the same RT account? How do you map user certyficates to 
> RT accounts?
> 
> Tom
> 

Hello Tom,

Each of our users has only a single identity (i.e. a single RT account).
Whether they log in using certificates or username/password, they are
logging in as the same RT user.

The certificates have an 'email address' embedded, which in our case maps to
the RT user name. We override RT::Interface::Web::CanonicalizeInfo to
extract the user name from the certificate's email address info.

Steve