Single Sign-On is when a user can use the same set of authentication credentials to access multiple different services.

learn more… | top users | synonyms

19
votes
7answers
2k views

Appropriate password requirements for a login (OpenID) service/provider/delegate/thing

This is with regards* to Stack Exchange's upcoming OpenID provider (and in particular, discussion about password requirements). Currently, password requirements are: Must contain 3 of: lower case ...
2
votes
2answers
2k views

Is this SSO design secure?

We're working on an SSO implementation that would be used accross domains. I realize there are proven working models out there like CAS for this but I'm toying with a different approach and I want to ...
1
vote
5answers
1k views

What are the benefits and drawbacks of emailing a user a login token/link?

The Question I was reading a forum last night discussing the idea of emailing a user a login link, much like a password reset link, so they don't require a password. Their email address is already ...