I appreciate all of the replies. All good stuff. It should be noted I'm about the furthest thing there is from a security specialist - I'm a rook, so be gentle if I sound like an idiot.
Mike D. - We're considering an LDAP solution, but had not looked much at AD. Thanks for the suggestion. I've dabbled with open source directories while tinkering around, but I haven't gotten in too deeply. Barney - the business objective is to increase security for our website and data. We're collecting more sensitive data, and a lot more of it. My primary objective is to make sure that the only people getting onto our website are the people that are supposed to be. Authentication is one of a few other things we're doing - this just happens to be what I'm responsible for investigating. Mike C. - Could you tell me a bit more about your experience with RSA SecurID? Were you responsible for installing the RSA bundle, or just the integration with CF? What did you need to do to get it working with CF? I am aware that there are books out there on this sort of thing, but like you said....they're big ones. I'm trying to narrow the scope before I have to read a novel. There's just not enough hours in the day. I'm just trying to figure out the right questions to ask.... ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:317975 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
