Menu
I am Curious about how cross domain authentication work? for example. To sign into Orkut.com you need to to sign in via Google.com. So the authentication happens at Google.com and it sets the cookie. So my question now is how does Orkut.com able to read this cookie or authenticate the user with no other information ?
What can possibly go wrong?
803
Cross-domain authentication is a common approach in identity management that authenticates users for sites that run on different domains. ReachFive handles this even for browsers that block third-party cookies. Cross-domain authentication is much more streamlined when using SSO.
Show activity on this post. Using an authentication token should work fine, but consider these points: Use a strong PRNG to generate the token, and generate a long token to prevent bruteforcing. Make sure a used token will instantly be invalidated to prevent replay-attacks.
The SSO domain authenticates the credentials, validates the user, and generates a token. The user is sent back to the original site, and the embedded token acts as proof that they've been authenticated. This grants them access to associated apps and sites that share the central SSO domain.
Caution: Active Directory cross-domain authentication requires one-way trusts between the domains or forests. However, Data Hub requires two-way trusts between the domains or forests. If it's not possible to provide two-way trusts between the domains or forests, claims-based authentication may be used instead.
This link might be helpful.
http://code.google.com/apis/accounts/docs/AuthForWebApps.html
Keep in mind, Orkut is one of the Google services.
OpenID is another solution which actually used in SO.
54
orkut is probably using google's OpenID+oAuth for authenticating users. This means that you probably have a google identitity url stored in your orkut profile, and orkut sends you to google so that you can verify that the users signing in through the browser do indeed own the google identity. If orkut gets verification that you own the identity, then orkut can safely assign you the autentication cookies for orkut.
29
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With
