Re: [Phplib-users] Basic authentication

[Chris J. <ch...@ch...>]

So, revisiting this issue a bit further:

If my "single signon" business partner who wants to send their users to my
secure site running PHPLIB without forcing their users to log in again did
the following, would that be sufficient?

They have proposed that they create a form on their page such that when the
submit button is clicked, they will POST the data to me and pass the
username and password.

Since both sites are SSL (HTTPS) encrypted, the POST'ed data should be
secure.  I should then just be able to do an automated, behind the scenes
login using their name and password, right?

It seems too simple!  I'm always sceptical when it seems that easy.

Anyone see any flaws in this?

Thanks,
..chris