I suggest Active Directory on Windows Server 2003|8. It can be scripted to create and modify accounts as well as groups and group membership. (CFLDAP) I use AD for just about every aspect of our intranet. AD authenticates our users and AD group membership authorized our users for certain areas. It's relatively inexpensive, but I would definitely suggest to AD domain controllers for redundancy. Of course, you could probably get by with open source directory servers, but AD gots it all! mike
_____ From: Doug Smidt [mailto:[email protected]] Sent: Wed 1/14/2009 7:33 PM To: cf-talk Subject: Beefing up authentication The small company I work for has been discussing different options to beef up our authentication. Currently, we're just an old fashioned enter username/password, check user table, login if credentials match system. We've been exploring options, but I was curious as to what other companies are up to these days. I'm looking to see what has worked, what hasn't, what was inexpensive but effective, expensive but awesome, and anything in between. We're also considering two-factor authentication, most likely using RSA SecurID (key fob). If anyone has any experience with implementation of this (CF or otherwise), I'd love to hear anything you could tell me about your experience. I realize it's a broad topic, so if anyone has a question that might lead me to getting better info, please don't hesitate to ask. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:317969 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
