Re: [flexcoders] Can AIR app get Workstation Credentials?
On Thursday 15 May 2008, Douglas Knudsen wrote: yes, on the wild internet I 100% agree. But what about a inTRAnet with strict IT rules in place? I just stepped away to make a cup of tea / go to the loo / sneeze / deal with a phone call, and when I came back the system had done it by itself. With single sign on, you loose any chance of being able to say 'you did this'. -- Tom Chiverton This email is sent for and on behalf of Halliwells LLP. Halliwells LLP is a limited liability partnership registered in England and Wales under registered number OC307980 whose registered office address is at Halliwells LLP, 3 Hardman Square, Spinningfields, Manchester, M3 3EB. A list of members is available for inspection at the registered office. Any reference to a partner in relation to Halliwells LLP means a member of Halliwells LLP. Regulated by The Solicitors Regulation Authority. CONFIDENTIALITY This email is intended only for the use of the addressee named above and may be confidential or legally privileged. If you are not the addressee you must not read it and must not use any information contained in nor copy it nor inform any person other than Halliwells LLP or the addressee of its existence or contents. If you have received this email in error please delete it and notify Halliwells LLP IT Department on 0870 365 2500. For more information about Halliwells LLP visit www.halliwells.com. -- Flexcoders Mailing List FAQ: http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt Search Archives: http://www.mail-archive.com/flexcoders%40yahoogroups.comYahoo! Groups Links * To visit your group on the web, go to: http://groups.yahoo.com/group/flexcoders/ * Your email settings: Individual Email | Traditional * To change settings online go to: http://groups.yahoo.com/group/flexcoders/join (Yahoo! ID required) * To change settings via email: mailto:[EMAIL PROTECTED] mailto:[EMAIL PROTECTED] * To unsubscribe from this group, send an email to: [EMAIL PROTECTED] * Your use of Yahoo! Groups is subject to: http://docs.yahoo.com/info/terms/
Re: [flexcoders] Can AIR app get Workstation Credentials?
On Wednesday 14 May 2008, Geoffrey wrote: Converting to an AIR app and I was wondering if I could get the logged in user's credentials from the workstation so we don't require a login screen. This is hardly ever a good idea, even in systems where it is possible. You (almost certainly) have no way to guaranty that the user who logged into the machine is the same person now running the application. -- Tom Chiverton This email is sent for and on behalf of Halliwells LLP. Halliwells LLP is a limited liability partnership registered in England and Wales under registered number OC307980 whose registered office address is at Halliwells LLP, 3 Hardman Square, Spinningfields, Manchester, M3 3EB. A list of members is available for inspection at the registered office. Any reference to a partner in relation to Halliwells LLP means a member of Halliwells LLP. Regulated by The Solicitors Regulation Authority. CONFIDENTIALITY This email is intended only for the use of the addressee named above and may be confidential or legally privileged. If you are not the addressee you must not read it and must not use any information contained in nor copy it nor inform any person other than Halliwells LLP or the addressee of its existence or contents. If you have received this email in error please delete it and notify Halliwells LLP IT Department on 0870 365 2500. For more information about Halliwells LLP visit www.halliwells.com. -- Flexcoders Mailing List FAQ: http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt Search Archives: http://www.mail-archive.com/flexcoders%40yahoogroups.comYahoo! Groups Links * To visit your group on the web, go to: http://groups.yahoo.com/group/flexcoders/ * Your email settings: Individual Email | Traditional * To change settings online go to: http://groups.yahoo.com/group/flexcoders/join (Yahoo! ID required) * To change settings via email: mailto:[EMAIL PROTECTED] mailto:[EMAIL PROTECTED] * To unsubscribe from this group, send an email to: [EMAIL PROTECTED] * Your use of Yahoo! Groups is subject to: http://docs.yahoo.com/info/terms/
RE: [flexcoders] Can AIR app get Workstation Credentials?
Isn't this a perfect usage of the EncryptedStore feature? Why not save the login credentials when the person first logs in, than save them via the EncryptedStore for the remaining usage. !k _ From: flexcoders@yahoogroups.com [mailto:[EMAIL PROTECTED] On Behalf Of Geoffrey Sent: Wednesday, May 14, 2008 3:11 PM To: flexcoders@yahoogroups.com Subject: [flexcoders] Can AIR app get Workstation Credentials? Our flex app requires a login(HTML page) before launching the main app(the SWF does not handle the logging in). Converting to an AIR app and I was wondering if I could get the logged in user's credentials from the workstation so we don't require a login screen.
RE: [flexcoders] Can AIR app get Workstation Credentials?
Crossing authentication barriers is always a hot topic. and the EncryptedStore would be a great place to mount a single sign-on solution for AIR apps. However - to keep this all in perspective - remember that any authentication method that allows credentials acquired during a handshake to be 'handled' outside the originating system isn't secure. it's a very bad idea. Rick Winscot From: flexcoders@yahoogroups.com [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Aebig Sent: Thursday, May 15, 2008 10:56 AM To: flexcoders@yahoogroups.com Subject: RE: [flexcoders] Can AIR app get Workstation Credentials? Isn't this a perfect usage of the EncryptedStore feature? Why not save the login credentials when the person first logs in, than save them via the EncryptedStore for the remaining usage. !k _ From: flexcoders@yahoogroups.com [mailto:[EMAIL PROTECTED] On Behalf Of Geoffrey Sent: Wednesday, May 14, 2008 3:11 PM To: flexcoders@yahoogroups.com Subject: [flexcoders] Can AIR app get Workstation Credentials? Our flex app requires a login(HTML page) before launching the main app(the SWF does not handle the logging in). Converting to an AIR app and I was wondering if I could get the logged in user's credentials from the workstation so we don't require a login screen.
RE: [flexcoders] Can AIR app get Workstation Credentials?
Yeah... with that I completely agree. I was assuming that he came to terms with the fact that his login *should* be in the application itself instead of breaking it up into pieces. Cheers, !k _ From: flexcoders@yahoogroups.com [mailto:[EMAIL PROTECTED] On Behalf Of Rick Winscot Sent: Thursday, May 15, 2008 4:01 PM To: flexcoders@yahoogroups.com Subject: RE: [flexcoders] Can AIR app get Workstation Credentials? Crossing authentication barriers is always a hot topic. and the EncryptedStore would be a great place to mount a single sign-on solution for AIR apps. However - to keep this all in perspective - remember that any authentication method that allows credentials acquired during a handshake to be 'handled' outside the originating system isn't secure. it's a very bad idea. Rick Winscot From: flexcoders@yahoogroups.com [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Aebig Sent: Thursday, May 15, 2008 10:56 AM To: flexcoders@yahoogroups.com Subject: RE: [flexcoders] Can AIR app get Workstation Credentials? Isn't this a perfect usage of the EncryptedStore feature? Why not save the login credentials when the person first logs in, than save them via the EncryptedStore for the remaining usage. !k _ From: flexcoders@yahoogroups.com [mailto:[EMAIL PROTECTED] On Behalf Of Geoffrey Sent: Wednesday, May 14, 2008 3:11 PM To: flexcoders@yahoogroups.com Subject: [flexcoders] Can AIR app get Workstation Credentials? Our flex app requires a login(HTML page) before launching the main app(the SWF does not handle the logging in). Converting to an AIR app and I was wondering if I could get the logged in user's credentials from the workstation so we don't require a login screen.
Re: [flexcoders] Can AIR app get Workstation Credentials?
yes, on the wild internet I 100% agree. But what about a inTRAnet with strict IT rules in place? The amount of time wasted logging in to the 25+ apps a day some enterprise employees have to use is expensive. DK On Thu, May 15, 2008 at 4:00 PM, Rick Winscot [EMAIL PROTECTED] wrote: Crossing authentication barriers is always a hot topic… and the EncryptedStore would be a great place to mount a single sign-on solution for AIR apps. However – to keep this all in perspective – remember that any authentication method that allows credentials acquired during a handshake to be 'handled' outside the originating system isn't secure… it's a very bad idea. Rick Winscot *From:* flexcoders@yahoogroups.com [mailto:[EMAIL PROTECTED] *On Behalf Of *Kevin Aebig *Sent:* Thursday, May 15, 2008 10:56 AM *To:* flexcoders@yahoogroups.com *Subject:* RE: [flexcoders] Can AIR app get Workstation Credentials? Isn't this a perfect usage of the EncryptedStore feature? Why not save the login credentials when the person first logs in, than save them via the EncryptedStore for the remaining usage. !k -- *From:* flexcoders@yahoogroups.com [mailto:[EMAIL PROTECTED] *On Behalf Of *Geoffrey *Sent:* Wednesday, May 14, 2008 3:11 PM *To:* flexcoders@yahoogroups.com *Subject:* [flexcoders] Can AIR app get Workstation Credentials? Our flex app requires a login(HTML page) before launching the main app(the SWF does not handle the logging in). Converting to an AIR app and I was wondering if I could get the logged in user's credentials from the workstation so we don't require a login screen. -- Douglas Knudsen http://www.cubicleman.com this is my signature, like it?
[flexcoders] Can AIR app get Workstation Credentials?
Our flex app requires a login(HTML page) before launching the main app(the SWF does not handle the logging in). Converting to an AIR app and I was wondering if I could get the logged in user's credentials from the workstation so we don't require a login screen.
RE: [flexcoders] Can AIR app get Workstation Credentials?
I don't think is possible. And wouldn't it be a security problem if it was? Gordon Smith Adobe Flex SDK Team From: flexcoders@yahoogroups.com [mailto:[EMAIL PROTECTED] On Behalf Of Geoffrey Sent: Wednesday, May 14, 2008 2:11 PM To: flexcoders@yahoogroups.com Subject: [flexcoders] Can AIR app get Workstation Credentials? Our flex app requires a login(HTML page) before launching the main app(the SWF does not handle the logging in). Converting to an AIR app and I was wondering if I could get the logged in user's credentials from the workstation so we don't require a login screen.
Re: [flexcoders] Can AIR app get Workstation Credentials?
not yet. When I asked about this at the AIR bus tour...summarized 'AIR 1 is really for consumers. Air 2 or more may add enterprise type features such as this.' DK On Wed, May 14, 2008 at 3:11 PM, Geoffrey [EMAIL PROTECTED] wrote: Our flex app requires a login(HTML page) before launching the main app(the SWF does not handle the logging in). Converting to an AIR app and I was wondering if I could get the logged in user's credentials from the workstation so we don't require a login screen. -- Douglas Knudsen http://www.cubicleman.com this is my signature, like it?
