What are the security risks of encouraging, supporting and allowing shared logins to our website (username / password)?
This feature would allow some number of users, normally working for the same organization, to all use a single login to the website and perform the same functions as that login with no further identifying info.
Several users and some of the business stakeholders are asking that we support and encourage shared logins to one of our new websites. I have no idea why they are asking for this yet. The website does not have anything to do with the health industry and no financial information will be tracked in it.
There are immediately some architecture and UX problems I have with this 'feature' but I am looking for any security risks/concerns to back up my other gripes.