04 Apr '12, 3pm

Building and implementing a Single Sign-On solution

Building and implementing a Single Sign-On solution

You might want to safely encrypt the data in a way that allows the clients to verify and trust that the token comes from a trusted source. A great solution for that would be to use RSA encryption with the public key available in all your client apps but the private key only available on the auth server(s). Other strong encryption solutions would also work. For instance, another appropriate approach would be to add a signature to the params sent back. This way the clients could check the authenticity of the params. HMAC or DSA signature are great for that but in some cases, you don’t want people to see the content of the data you send back. That’s especially true if you are sending back a ‘mobile’ token for instance. But that’s a different story. What’s important to consider is that we need a way to ensure that the data sent back to the client can’t be tampered with. You mi...

Full article: http://merbist.com/2012/04/04/building-and-implementing-a...

Tweets

Building and implementing a Single Sign-On solu...

rubyflow.com 04 Apr '12, 3pm

Building and implementing a Single Sign-On solution Posted by mattetti on April 04, 2012 — 0 comments In my latest blog po...

Retroficiency offers a quick solution for energy audits

Retroficiency offers a quick solution for energ...

greenbiz.com 04 Apr '12, 1pm

As a private equity investor, Bennett Fisher spent 10 years buying and selling properties. He found that the 30-day escrow...

#CST And #Delcross Demonstrate Integrated Solut...

rfglobalnet.com 04 Apr '12, 9am

Computer Simulation Technology (CST) and Delcross Technologies (Delcross) will be demonstrating initial integration and ca...

TVPlug, your all in one WiFi Media Solution

TVPlug, your all in one WiFi Media Solution

en.akihabaranews.com 05 Apr '12, 12pm

Behind this stylish WiFi MIMO router, hides a fully capable media center solution. Indeed not only the TVPlug will replace...

Implementing signal handlers - some caveats #ruby

blog.rubybestpractices.com 03 Apr '12, 9pm

USP: Implementing signal handlers - some caveats 2012-03-27 00:25, written by Eric Wong Signal handlers may run at any tim...

What's Better - On-page SEO or Link-building?

What's Better - On-page SEO or Link-building?

seomoz.org 05 Apr '12, 2am

I'll try to keep the point short and sweet - when it comes to the right mix, there is no one-sized-fits-all solution. On-p...