We have made available a facebook SiteMinder infrastructure SSO connector. This pluggable module leverages OAuth standards and the facebook graph API.
For further info, please contact info@nsecurellc.com or proceed to http://www.nsecurellc.com/
Subscribe to:
Post Comments (Atom)
pretty much an OAuth implementation in SiteMinder custom auth scheme, two downsides to it -
ReplyDelete1. Technical - SiteMinder java auth api has always had memory leak issues and even if 20% of the FB user population use this, SM is not going to sustain.
2. Since solution linked all FB users to one local user account (Obviously, to create sm session), there's no security, one phishing attack on SMSESSION and security is compromised)
Since the solution intends to capture number of facebook users reading or visiting an marketing effort, i am not sure why the whole layer of SiteMinder is brought into the picture, may be a marketing gimmick to sell by using the CA SiteMinder word .... it would have been your underlying portal would have just had a small engine to make OAith calls and record username and their profile info ...