[Zope-dev] Single Sign On

[Wichert Akkerman]

Previously Shane Hathaway wrote:
> Alternatively, I have wondered if we actually need full-blown SSO; 
> perhaps a carefully constructed domain-wide cookie would do the trick. 
> Any experiences with that?

auth_tkt based cookies sounds like a good option, possibly combined with
something like SQL or LDAP for shared member properties. It has the
advantage of being very widely supported as well as bwing very simple.

CAS appears to be a common SSO system used for Plone sites and should
work as well.

Wichert.

-- 
Wichert Akkerman <wichert at wiggy.net>    It is simple to make things.
http://www.wiggy.net/                   It is hard to make things simple.