Posted by David Haynes on 11/22/05 04:35

NotGiven wrote:
> Researching methodolgies where I open up an web site to different companies
> without having to manage the user ID and password for every person in every
> company.
>
> Thoughts include:
> 1--create a different certificate (like SSL or Apache generated cert) for
> each new company then log them in based on that. Refuse all users except
> those that have a cert.
> 2--somehow integrate with company network login system
> 3--check users' referrer domain to verify company - easily spoofed?
>
> Other ideas?
>
>
Run virtual systems (vmware et al) and offer each company their own image.
Use IP controls to limit the addresses that can connect to any image.
Have one or two (user/admin) logins for each instance.

-david-

[Back to original message]