Single-sign-on PHP application to integrate with internal we

## Overview We need to build a PHP application, built with the Laravel 5 MVC framework, to provide single-sign-on functionality for a suite of other 'provider' applications and websites managed by the organisation. Initially, these provider applications are a WordPress site and a custom PHP application written in Laravel. The single-sign-on system will need to be able to easily accommodate additional providers in the future. We're looking to hire a PHP developer to work on the application functionality and to create the basic HTML required for the application to function, but all design and front-end work will be done internally so HTML, CSS and Javscript is not required. If after reading the specification below you have any further questions or want to discuss the project in more depth please contact us. ## Specification The system should be developed on the Laravel 5 framework with the following specification: - Administrators can add and manage user accounts centrally. Users will have basic data such as name and email address, and provider-specific information such as their WordPress username and password, etc. - Provider applications will be defined in the application code but should be built to a set of interfaces to allow simple and consistent addition of providers in the future. - Administrators can manage which provider applications are accessible to each user. - The system should show users which provider applications they have access to in a dashboard. - Administrators can update API keys and URLs from the various provider applications. - When users click on a provider application's "Log in" button the system should generate a unique token based on the user's provider's credentials and the provider's API key, build up a URL including this token, and send the user to this URL (which the provider applications will in turn accept, extract the user information, and log the user into the provider). - The system should also provide a set of URLs for each provider which allow the provider application to seamlessly redirect a user to the single-sign-on application if they are not logged into the provider application, log into the single-sign-on application (or just continue on if the user is already logged into the single-sign-on application), and redirect the user back to the provider application's log-in URL with the appropriate token, etc. Most of the application code for each provider will be handled internally, but we do also want the developer to initially create a WordPress plugin to interface with the single-sign-on application. This plugin should be developed in a sandbox WordPress environment with the specifications: - WordPress's internal log in system should be overridden to instead redirect to the single-sign-on. - A set of URLs on the WordPress application should accept and handle redirections from the single-sign-on application. - This functionality should be packaged up as a WordPress plugin so it can be developed separately from the organisation's existing WordPress application and then be added to it once the plugin's functionality is complete. ## Other requirements: - Code should be cleanly organised and maintainable as the application will continue to be developed in the future. - The developer should be able to work with our team to develop the detailed specification and to build the application according to existing development paradigms and standards. - Application should be managed using Git version control allowing the organisation to work on the application alongside the developer. - Code should have sufficient test coverage to ensure the various pieces of functionality and UI work as expected. Tests should be written clearly so they can be understood and expanded on by the organisation's internal team. - Developer should be a native English speaker and available to discuss the project with our team in the UK via Skype or similar.