Enabling TOM users to log into their TOM using a single-sign on service would benefit many users' workflow. This functionality has been requested by multiple user groups including SCIMMA and the Opticon-RadioNet Program.

The Opticon-RadioNet program is researching which OAuth service they would prefer to use. As an interim solution, they would like to propagate the token provided by their EVN facility into the facility module, but in the long term would like to implement a full OAuth service, with the provider TBD.
SCIMMA are using a KeyCloak system for OAuth, and support for this is already implemented into Hermes.

• Contact Opticon-RadioNet program to clarify their proposed interim solution and advise on its implementation
• Add support for KeyClock-based single-signon into the TOM Toolkit