Single Sign on - specific constituent group

Options
Andrew MacKay
Andrew MacKay
Ancient Membership 10 Comments Photogenic
in Blackbaud Luminate Online® & Blackbaud TeamRaiser® Discussions

Hi, I'm setting up an app outside Convio that we would like to have accessible only to people within a specific constituent group in Convio. I've used the Single Sign-on API before (Convio as Master) and I see that there is a "getUserGroups" method in the Constituent API that will tell me what groups the person is in. Will I need to make 2 separate calls in order to make sure the person can be logged in, and make sure they are in a specific group? If anyone has ideas on the best way to do this please let me know. Thanks!

Andrew

Tagged:

Comments

  • Adrian Cotter
    Adrian Cotter
    Ancient Membership 100 Comments Facilitator Level 3 Praiser Level 1

    Hey Andrew,

    I think they would have to be two separate calls... log the user in, then use the Constituent API to ask: does the logged in user belong to the group X.

    Although another possible way to do it would be to have a separate process that keeps a list of the allowed users in your app (which you can get through the getGroupMembers in the Constituent API? (not tried it ever)). As they are logging in, you could check on your side whether their email address or username is there... Not sure that's any easier though.

  • Michael
    Michael
    Ancient Membership 100 Comments Facilitator Level 3 Inquirer Level 2
    Adrian Cotter:

    Hey Andrew,

    I think they would have to be two separate calls... log the user in, then use the Constituent API to ask: does the logged in user belong to the group X.

    Although another possible way to do it would be to have a separate process that keeps a list of the allowed users in your app (which you can get through the getGroupMembers in the Constituent API? (not tried it ever)). As they are logging in, you could check on your side whether their email address or username is there... Not sure that's any easier though.

    Unless your group is larger than 1000 (or whatever the internal limit is set to in Convio) -- if that's the case, you can't use the group method because you can't list out more members than the internal limit (no matter what you set as the max parameter) and there is no way around this issue that I know if -- in other words, it makes the getGroupMembers method completely useless except for very small-scale applications.

  • Andrew MacKay
    Andrew MacKay
    Ancient Membership 10 Comments Photogenic

    Ok, thanks guys!

Categories