Toynbee
unread,Dec 23, 2009, 2:05:04 PM12/23/09You do not have permission to delete messages in this group
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to ybhatt...@gmail.com
We have a government SharePoint portal that members authenticate and
authorize prior to viewing content.
A certain content (not all, only a small fraction) is to be shared
with OTHER (external) portals (those OTHER could be based on several
platforms, e.g. Websphere). That is, when users login to the OTHER
portals, they should be able to securely access a specific content on
OUR SharePoint portal, without having to authenticate/authorize at a
user specific level.
There is no AD or other trust relationship between those OTHER
portal / user directories and our directories.
We do not want to set up local user directories on our site. We do not
need to give access to content based on specific user profiles, anyone
who is authorized on those portals should be able to access this
information.
They can trust our site to show up on their portals, and we need to
somehow trust the users of those OTHER portals. Is there a lightweight
solution WITHOUT having to use heavyweight methods like just in time
assertions, XACML, SAML, installing certificates, etc. The easiest
would be for our SharePoint portal to trust any browser redirection
from their portals (say 5 of them), but that is probably too crude and
could be easily spoofed.
Is there a better / more robust solution?