Hello OpenProject Community,

I am a developer currently working on a project that involves linking a CMS to an OpenProject Community instance both of which are self-hosted. We are trying to essentially create a Single Sign On work flow between these two sites but see that the Enterprise edition is required to handle that scenario out of the box.

My question:

Has anyone had any experience securely mimicking the Single Sign On work flow by other means? 

Ideally the workflow would be:

• User Logs into the CMS
• When the user needs to manage some project details, he/she would click a link in the CMS dashboard which would redirect them to the OpenProject instance authenticated

If I current understanding is correct,  going the OAuth approach would allow our CMS to make API requests on behalf of the user but would not allow them to log into the web interface without entering their credentials.

Any resources, general guidance, or ways to provide a similar SSO experience using the community edition would be greatly appreciated.

Thanks