Posted 2005-04-26T21:17:00+01:00 in web

Single sign-on for the web: Stanford WebAuth

I heard the name somewhere a while ago, and just checked out their site: Stanford University’s WebAuth project. WebAuth is a single sign-on system for websites:

Once the user has logged in to the login server, their identity is carried in a cookie set by that login server and they will not again need to enter their password until their credentials expire, even if they visit multiple different protected web sites.

Two things are interesting about this project: Kerberos is used for authentication, and cookies are used for the cross-site session concept.

Stanford WebAuth v3