Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 17 Jul 2009 16:46:24 -0400
From:      "Brian A. Seklecki" <seklecki@noc.cfi.pgh.pa.us>
To:        John Almberg <jalmberg@identry.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: SSO solution in ports?
Message-ID:  <1247863584.10382.14639.camel@soundwave.ws.pitbpa0.priv.collaborativefusion.com>
In-Reply-To: <9AA14F8C-6061-4E64-895A-C8D047F40A74@identry.com>
References:  <9AA14F8C-6061-4E64-895A-C8D047F40A74@identry.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 2009-07-16 at 10:52 -0400, John Almberg wrote:
> I am trying to build a set of web applications that are accessed  
> through a web portal that uses a Single Sign On (SSO) solution.  

Combine your SSO (LDAP mostly, Kerberos is a waking nightmare) with a
2FA/TFA (Second Factor Authentication) solution such as grid cards,
FOBs, or an OTP password list.

I recommend Entrust IdentityGuard.   Our pam_radius works fine with it,
and web application can run NSS functionality out of LDAP and PAM
functionality out of Entrust's SOAP-XML Authentication API. 

 ~BAS





Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1247863584.10382.14639.camel>