Building and implementing a Single Sign-On solution

Building and implementing a Single Sign-On solution | Matt Aimonetti

merbist.com 04 Apr '12, 3pm

Building and implementing a Single Sign-On solution

You might want to safely encrypt the data in a way that allows the clients to verify and trust that the token comes from a trusted source. A great solution for that would be to use RSA encryption with the public key available in all your client apps but the private key only available on the auth server(s). Other strong encryption solutions would also work. For instance, another appropriate approach would be to add a signature to the params sent back. This way the clients could check the authenticity of the params. HMAC or DSA signature are great for that but in some cases, you don’t want people to see the content of the data you send back. That’s especially true if you are sending back a ‘mobile’ token for instance. But that’s a different story. What’s important to consider is that we need a way to ensure that the data sent back to the client can’t be tampered with. You mi...

Full article: http://merbist.com/2012/04/04/building-and-implementing-a...

Tweets

@ideajoy » 25 Apr '12, 5am
RT @EvanGBrown [link] fun read on SSO.
@EvanGBrown » 25 Apr '12, 4am
[link] fun read on SSO.
@coderweekly » 13 Apr '12, 11am
From this week's issue: Building and implementing a Single Sign-On solution [link] #ruby
@TimPetricola » 10 Apr '12, 3pm
Building and implementing a Single Sign-On solution [link] #api #authentication
@ludofleury » 10 Apr '12, 11am
RT @rgaidot: great post "Building and implementing a SSO solution" [link] #oauth
@StreamWIDE_RD » 10 Apr '12, 7am
how to implement single sign-on : [link]
@cnruby » 10 Apr '12, 6am
Reading: "Building and implementing a Single Sign-On solution | Matt Aimonetti"( [link] )
@nicolasmarin » 08 Apr '12, 4pm
RT @JavierCasares: Building and implementing a Single Sign-On solution [link]
@ArMyZ » 07 Apr '12, 4pm
Building and implementing a Single Sign-On solution [link] #li #SSO #learningcorner
@dishengqiu » 06 Apr '12, 6pm
"Building and implementing a Single Sign-On solution [link]" CAS :)
@agileando » 06 Apr '12, 7am
Contruye una arquitectura single sign on [link] #development
@RaaVi » 06 Apr '12, 6am
RT @twom: gr8 find! RT @theresaanna: @brokedahmouth mayB interesting? Building & implementing a Single Sign-On solution [link]
@twom » 06 Apr '12, 3am
Great find! RT @theresaanna: @brokedahmouth Maybe interesting? "Building and implementing a Single Sign-On solution" [link]
@theresaanna » 06 Apr '12, 2am
@brokedahmouth Maybe interesting? "Building and implementing a Single Sign-On solution" [link]
@excerionsforte » 06 Apr '12, 1am
[link] Been there done that. Everything there except ruby of course. #sso
@brian_klaas » 05 Apr '12, 2pm
Nice writeup on building single sign-on for multiple apps in your domain. [link]
@rbriank » 05 Apr '12, 12pm
Thanks @merbist. [link]
@AxelNennker » 05 Apr '12, 9am
Auth in OAuth stands for Authorization, not Authentication [link] /via @nov
@johnbeynon » 05 Apr '12, 9am
If you're looking at doing single sign on solutions this is a great read - [link]
@nov » 05 Apr '12, 8am
半分くらいまでずっと昔のSSOのHow toみたいなこと書いてあって、いつOpenIDとかOAuthとか出てくんだろうと思ってたら、記事終わってたww [link]
@nov » 05 Apr '12, 8am
Finally recognized this article is not about interoperable SSO solution at all :p [link]
@AleksejsZ » 05 Apr '12, 8am
Building and implementing a Single Sign-On solution [link] #kjwij
@PelleB » 05 Apr '12, 7am
RT @nov: なんかこの記事書いた人とPelleが、僕にmentionしつつ何かを議論している。ちゃんと記事読めってことか。 [link]
@nov » 05 Apr '12, 7am
なんかこの記事書いた人とPelleが、僕にmentionしつつ何かを議論している。ちゃんと記事読めってことか。 [link]
@RubyReflector » 05 Apr '12, 7am
Top Ruby Article: Building and implementing a Single Sign-On solution: [link]
@johanforumn » 05 Apr '12, 5am
Building and implementing a Single Sign-On solution [link] via @zite
@shawn_won » 05 Apr '12, 4am
RT @usefulparadigm: SSO에 대한 실용적인 설명과 좋은 예제가 함께. Building and implementing a Single Sign-On solution | Matt Aimonetti [link]
@ajit555 » 05 Apr '12, 2am
Building and implementing a Single Sign-On solution [link] #authentication
@usefulparadigm » 05 Apr '12, 2am
SSO에 대한 실용적인 설명과 좋은 예제가 함께. Building and implementing a Single Sign-On solution | Matt Aimonetti [link]
@GaryMaloufJr » 05 Apr '12, 2am
Implementing a single sign on system [link]
@yanavery » 05 Apr '12, 1am
Building and implementing a Single Sign-On solution - [link] #security #sso
@nov » 04 Apr '12, 11pm
RT @PelleB: Interesting article about creating a Single Sign On service. [link] I disagree though that OAuth isn't the way to go.
@emson » 04 Apr '12, 10pm
Building and implementing a Single Sign-On solution in #Ruby [link]
@hopkinschris » 04 Apr '12, 8pm
Building and implementing a Single Sign-On solution - [link] @oshoma
@callumdryden » 04 Apr '12, 8pm
[link] decent article on implementing an sso solution
@PeterRosdahl » 04 Apr '12, 8pm
Är du på väg att kika över en arkitektur för en Single Sign-On lösning? Kolla på det här! [link]
@PelleB » 04 Apr '12, 7pm
Interesting article about creating a Single Sign On service. [link] I disagree though that OAuth isn't the way to go.
@jblemee » 04 Apr '12, 6pm
RT @glejeune: Building and implementing a Single Sign-On solution - [link]
@grmpyprogrammer » 04 Apr '12, 6pm
I think these types of systems are some of the hardest to get right [link]
@derekjbarber » 04 Apr '12, 6pm
This is a great article: "Building and implementing a Single Sign-On solution" [link]
@infosecman144 » 04 Apr '12, 6pm
implementing single sign on for web…[link]
@ent_forum » 04 Apr '12, 5pm
RT @HackerNewsYC: Building and implementing a Single Sign-On solution [link]
@brecke » 04 Apr '12, 5pm
Good read on OAuth: [link] (via @alcides)
@utvara » 04 Apr '12, 5pm
@salvo_nicotora Building and implementing a Single Sign-On solution [link]
@KaiWaehner » 04 Apr '12, 5pm
“@myfear: Building and implementing a Single Sign-On solution [link]” <-- Great article!
@flakasoft » 04 Apr '12, 5pm
Good overview of Single Sign-on implementation.... [link]
@DavidGuyon » 04 Apr '12, 5pm
"Building and implementing a Single Sign-On solution" [link] Flows explained and Sinatra code sample
@myfear » 04 Apr '12, 5pm
Building and implementing a Single Sign-On solution [link]
@notlevinalex » 04 Apr '12, 5pm
Building and implementing a Single Sign-On solution: [link]
@larstesmer » 04 Apr '12, 5pm
RT @merbist: new blog post: Building & implementing a Single Sign-On solution [link]

Building and implementing a Single Sign-On solution | Matt Aimonetti

Building and implementing a Single Sign-On solution

Tweets

Building and implementing a Single Sign-On solu...

Retroficiency offers a quick solution for energ...

#CST And #Delcross Demonstrate Integrated Solut...

TVPlug, your all in one WiFi Media Solution

Implementing signal handlers - some caveats #ruby

What's Better - On-page SEO or Link-building?