We have a requirement where we are creating an user generation page over internet for various vendors.
This was earlier done by our operations team on intranet. For each vendor to create a unique ID that was used for various purposes.
How can we authorize users accessing the registration page hosted over internet?
Note: We don't save the vendors data in our system as they keep changing frequently.
Edit 1: One way we have been discussing is to introduce a 4 eye check. This way once the user has registered, It can be approved by two individual(both internal users- which role will have this priviledge is yet to be decided). Once they have approved that the user reistered is legitimate, we can save his details and then use it for authenticating the user.
Since, the vendors keep changing regulary, we are planning to introduce a 30 days inactivity threshold, after which the vendors ID will be disabled.
Please let me know if this is correct or if there is a better way to do it