EVE Technology Lab

Hi

At work we are implementing a new system for security on our single sign on websites using the new claims based security model. See http://en.wikipedia.org/wiki/Claims-based_identity for details, plus google for more indepth.

It occured to me that CPP could (or may even already do) use this type of authenication on the their website. One of the things this allows is the idea of federated authenication. If CPP opened up their STS to allow other people to use their authenication (as facebook appears to now be doing) then fansites and corporation/alliances could use CPP to authenicate. The claims token could have your corporation, alliance and titles in the claims. Then people could secure there out of game services using the same information they already maintain in game. If a user is kicked from there corp it will automatically lock them out of all the out of game services for that corp as well.

Just an idea.


Knowsitall