Typically, there are very expensive packages that a difficult to maintain which set up a wrapper around each application to handle authentication. Some of these actually reduce security.
If you want to build a single sign on solution you have to get pretty deep into delegation and kerberos realms. It completely depends on the applications and their methods of authentication and authorization. -------------------------- Sent from my BlackBerry Wireless Handheld ----- Original Message ----- From: ActiveDir-owner Sent: 06/05/2003 01:29 PM To: "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]> Subject: RE: [ActiveDir] Single sign-on And is it good for single sign-on implementations for apps having disparate databases, Oracle, SQL Server et al ? Any used-it-and-this-is-what-we-ran-into kind of stories, anyone ? ./Shshank -----Original Message----- From: Roger Seielstad [mailto:[EMAIL PROTECTED] Sent: Thursday, June 05, 2003 7:30 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Single sign-on Best low cost alternative is called Simple Sync from CPS Systems. It also doesn't come with the Microsoft only limitations of the free version of MMS2003 -------------------------------------------------------------- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. > -----Original Message----- > From: Chris Flesher [mailto:[EMAIL PROTECTED] > Sent: Thursday, June 05, 2003 10:26 AM > To: [EMAIL PROTECTED] > Subject: RE: [ActiveDir] Single sign-on > > > Are there any other products out there similar to MMS? When > you say "clunky to set up and configure", are we talking months? > > Chris Flesher > The University of Chicago > NSIT/DCS > 1-773-834-8477 > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Glenn Corbett > Sent: Thursday, June 05, 2003 3:10 AM > To: [EMAIL PROTECTED] > Subject: Re: [ActiveDir] Single sign-on > > > RE: [ActiveDir] Single sign-onThat used to be the case, not > sure if MMS 2003 has the same sort of requirements. > > The main reason they had consulting attached was that MMS was > fairly clunky to set up and configure, and unless you knew > what you were doing, could tie youself up in knots fairly > quickly. Obviously not something MS wanted to let "into the > wild", as customers who had problems with it invariably came > away with a bad impression (through their lack of knowledge > of the product). > > ..and it wasnt just MCS, any of the major "certified" > partners could assist you with MMS design / implmentation / > deployment (did some consulting on MMS while @ Compaq/HP). > > Glenn > > ----- Original Message ----- > From: Mayet, Yusuf Y > To: '[EMAIL PROTECTED]' > Sent: Thursday, June 05, 2003 4:40 PM > Subject: RE: [ActiveDir] Single sign-on > > > Rick, correct me if I am wrong but as far as I know if one is > considering MMS Enterprise than you are bound by MCS to > assist you in the Q&A and Design. (and they don't come cheap) Yusuf > > <snip> > > List info : http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: > http://www.mail-archive.com/activedir%> 40mail.activedir.org/ > > > List info : > http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: > http://www.mail-archive.com/activedir%> 40mail.activedir.org/ > List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
