MD5 Hash and providing a link to SSO on a service from Moodle

MD5 Hash and providing a link to SSO on a service from Moodle

by Fabian Glagovsky -
Number of replies: 2
Picture of Particularly helpful Moodlers Picture of Testers

Hi,

I need to provide our Moodle students with access to a library and they have a system of SSO in which I need to provide a specific URL that includes their website, certain parameters, and a salted password with MD5. Is there any tool in Moodle that provides this functionality?

The link I need to create from Moodle is like this:

https://www.platform.THESERVICE.com/sso?CustomerId=<CID>&Email=<EMAIL>&FirstName=<FIRSTNAME>&ts=<UTC_TIME_STAMP>&md5=<MD5_VALUE>;

Best,

Fabian

Average of ratings: -
In reply to Fabian Glagovsky

Re: MD5 Hash and providing a link to SSO on a service from Moodle

by Tim Hunt -
Picture of Core developers Picture of Documentation writers Picture of Particularly helpful Moodlers Picture of Peer reviewers Picture of Plugin developers
MD5 is not a good enough hash function for passwords.

Really, raither than trying to re-invent some half-arsed security, this other system needs to implement LTI, which has a properly reviewed secuirty design.

(Sorry, I realise this is not a helpful answer.)
Average of ratings: -
In reply to Tim Hunt

Re: MD5 Hash and providing a link to SSO on a service from Moodle

by Fabian Glagovsky -
Picture of Particularly helpful Moodlers Picture of Testers
Haha, no, it isn't. But thanks anyway smile
Best,
Fabian
Average of ratings: -