Re: Singe Sign On

I've had mild success with pubcookie [google for it], the signup stuff is simple and works ok, however we still havent figured a clean signup strategy for it.. I've done other research on this for another project, it ended up using hidden iframes, header(location:) redirects, cookies and a few md5 checksums to do a similar thing. (unfortunatly I dont own the code or spec document from that now, but the concept is pretty simple) sxip is probably the best option if you dont want to manage a userbase/authentication server. Regards Alan Ammar Ibrahim wrote:

I want to build an SSO for some company. I would like to know if anyone has some ideas where to start? I know that LiveUser might include an SSO thing in the future, but I really don't wanna go for that. Here are some ideas: 1- It must integrate easily with other applications, preferebly without any modifications. e.g. If i decide to install a web mail system, I want it to authenticate against my SSO. 2- Can LDAP help here? 3- I'd like to put SSO on a seperate server, so maybe XML communication might sound like a good idea, XML-RPC anyone? 4- This is a high traffic site, performance is a critical issue. I would appreciate any ideas here. Ammar Ibrahim