Hey all,

I've got a bit of a backwards SSO request and was wondering if this scenario 
was possible or not. At the moment I can't seem to find any reference to suit 
but it's not to say I've overlooked!!

Basically, I have a client (aptly named "host") that share their infrastructure 
(hardware, network, software, etc) with a cross section of customers (named 
"guests"). Some guests are members (trusts established and/or with host AD user 
accounts) of the "host" AD domain while other "guests" maintain with own 
domains.

My client will be offering a new service, MOSS 2007, in which they would 
provision a "guest" with a site collection and pretty much let them go for it 
(following some governance of course). Their dilemma, and mine at the moment, 
is that a "guest" in another domain will require an account (either a "host" 
domain account or FBA (don't want to go down this track) but in either case 
they will have to enter credentials when they hit the SharePoint landing page.

Note: Politics...they don't necessarily want to start trusting "guest" domains.

I was considering SharePoint SSO but realised that you need a "host" account 
and you'd be carrying out authentication to other systems from there (as a base 
point). Does anyone know if it's possible to use SSO in the above scenario or 
am I barking up the wrong tree. SSO would be great but might need to configure 
it elsewhere. Other alternatives/suggestions?
Cheers guys,

Damien

_______________________________________________
ozmoss mailing list
[email protected]
http://prdlxvm0001.codify.net/mailman/listinfo/ozmoss

Reply via email to