Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeOur CommunityOur CommunityGeneral Discuss...General Discuss...DNN 4.1.0 release scheduleDNN 4.1.0 release schedule
Previous
 
Next
New Post
5/26/2006 2:10 PM
 

Kennster,

Off the top of my head I wasn't sure, so I went back through a couple of posts in the benefactors forums that Charles (who's making all the membership changes), and a few benefactors have had on this area. I've cut and pasted a few key pieces from a variety of posts below, the hyphens seperate the posts(hopefully the people who originally posted them won't mind my theft *grin*):

-------------------

To summarise, the expected behavior for Users in 3.3/4.1.

A single user can be a member of many portals in the same way as they used to in 2.x. 

There is a single entry for the user in the Users table and corresponding aspnet_Users table. 

UserPortals controls their membership in each portal. 

UserProfile controls their Profile - which is different in each portal.
-------------------

History of dotnetnuke user's

In DNN 2.1.2

All user data was stored in the Users table. 

The authorization flag was stored in the UsersPortals table.  This makes it possible to authorize users on a per/portal basis which is ideal.

 It made sense from the user's perspective.  If I log into portal A and change my address, I don't have to log into portals B, C and D to make the same change.  It behaves like a single account.

 

In DNN 3.1,2/4.1

The Whidbey Membership providers were used.  Each portal had a separate set of data.  It made sense from a user's perspective each account was completely isolated. 

 It behaves like separate websites.  We created *product name removed* to support single-sign-on, the best of both worlds.

 

In DNN 3.3/4.1

This release is somewhere in the middle.  Some information is shared such as username, displayname, I guess first/last name, email address.  Other information is stored per/portal, e.g. address, phone, etc.

 

Does this make sense to the user?

I can login to portal A and B using the same username/password. 

 

If I change my email address in portal A, it will be changed in portal B.  But if I change my address in portal A I have to change it in portal B too. 

 

If I hide my address in portal A it may be visible in portal B.  I

 

If I change my first name in the membership section it will update in both portal A and portal B.  If I change my first name in the profile section on portal A it won't update in either membership section and it won't update in the profile section on portal A.

 

Conclusion…

 

Splitting the data will confuse users.  It will also make reporting difficult for administrators.  There won't be any good way to aggregate user information across portals.  Is the address correct in portal A or portal B?

 

I don't think the current implementation is sufficient to share users across portals.   

Recommendation:

Super User account data is shared across portals and it works great! 

  Why not share data for all users? 

 The host defines the properties shared by all portals.  These would include all the standard default properties like name, address, etc.  The portal admin defines portal-specific properties. 

 I don't think there's any technical reason a user can't have both global and portal-specific properties.

-----------
there is a reason for the DNN 3.3 behaviour: the new user profile can be customized per portal, which is of value in a multi-portal environment with independant portals. You are right, that in a scenario with SSO a common provile would be preferable. It looks like there is a need for both: shared and portal individual properties. It would be preferable, if the concept could be extended, so the user profile is a combination of host and portal properties.

--------
We are dependent on the behavior of a 3rd-party component (Memberbership) that is really designed by MS for single portal envirnoments.
With the new abstraction of the provider, it would be possible to create a new concrete provider that works around these issues.
The request for single sign-on capabilities (which in effect this is), to revert back to how it was done in 2.x has been a pretty vocal one from the community.

We will review these issues, and see if there is a soln which can achieve both goals.


Buy the new Professional DNN7: Open Source .NET CMS Platform book Amazon US
 
New Post
5/26/2006 5:32 PM
 

So this means one of the most requested features will not be included?   If 3rd party modules can do it (UCanUse, etc) I thought surely it can be done much easier in the core.   Maybe a setting saying shared / not shared?

Have the module developers who have SSO modules been involved in the beta testing do you know? 

To me an onymoron is a portal system that cannot share portal users.  Just IMO.  

 
New Post
5/26/2006 7:42 PM
 

The threads I posted came from a conversation between one of the SSO developers, as well as Charles and Shaun. The new abstracted membership will allow us to work around the limitations of the memberrole provider - i would not be surprised to see a more advanced version of SSO in a near future release (such as the portal groups roadmap item), but it was outside the scope of this due to the large amount on other matters, particularly custom profile settings/custom registration pages which is probably our most requested enhancment.

Please note that many of the existing 3rd party SSO solutions have limitations such as relying on database features such as triggers which would mean that they could not be ported to some other databases. I've also had to help a number of users who have had failed upgrades due to trigger based SSO solutions, so we need to ensure we build a solution that meets a number of different user scenarios, as well as being impact free.

Cathal


Buy the new Professional DNN7: Open Source .NET CMS Platform book Amazon US
 
New Post
5/31/2006 9:51 AM
 

Cathal:

Thank you so much for updating us on this! I have been looking forward to the day I could use all of the great features of the latest version of DNN. Provided only one user/email/password combination exists, I for one can live with having separate profile properties in each portal. I am confident I can come up with a hundred different ways to synchronize the various user profile data I may need in daughter portals: the important thing here is that when a user changes her password in a daughter portal, it will be the same across all portals: I am pretty sure this is where Rod Rotkins broke down when working on DNN Elearn, although no one knows since he hasn't posted a message or anything to the DNN Elearn project site since like last November. Since all the profile data will be stored more conventionally (a single row of data per property/value pair), it will be significantly easier to manage the profile data, a small price to pay to have SSO back !!!

Now, it would be really great if the community members who can't afford to cough up $800.00 can get their hands on this.

 

 
Previous
 
Next
HomeHomeOur CommunityOur CommunityGeneral Discuss...General Discuss...DNN 4.1.0 release scheduleDNN 4.1.0 release schedule


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out