I like to make Drupal 8 in CentOS 7 with Apache 2.4, mySQL and PHP 5.6 environment with requirements:
Multi-site within domain (site0.example.org, site1.example.org, etc.)
Shared local user account with SSO (userid, password, and all of user entities - name, email, address, phone, ...)
Different/dedicated content databases for each site
Different/dedicated users' role for each site
So, The user should be able to login in any sites and maintain the session across sites (SSO) but they may have different role, access and permission at different sites.
I'm login at site 1 (site1.example.org) and I have admin role in site so I can administer site 1.
But when I move to site 2 (site2.example.org) - I don't need to re-login again (SSO) but I may have a different role in site 2 (e.g authenticated user - view only).
What is the Best approach for this requirements? Bakery? OpenLDAP? Saml? Or any other solutions?