SecurePortalDashboard

Fundamental Requirements

• Allow PortalMember?(s) to join and login using their existing SMB credentials (highest)
• Honor previous authentications (e.g., from viewing the site "above" the portal) (high)
• Avoid manual "member setup" hassles (i.e., create member folders "lazily", rather than in an "eager" upfront batch).

  -- Note that ditching this requirement would trim initial deployment time significantly: a "preloaded" portal would only have to solve the bare authentication problem, and could sidestep trying to set up accounts-on-demand cleanly.

Key Topics (especially important if we DoTheRightThing?)

• ExternalMemberAuthentication?
  • PortalUsesAcquiredUserFolder?
  • PortalEmbedsExternalUserSource?
  • JoinOnlyCreatesMemberFolder?
• Authentication types
  • SMBValid?
  • PluggableAuthenticationModule?
  • KerberosTicket?
  • LightweightDirectoryAccessProtocol?
  • XFiveOhNineCertificate?

Quick hacks

• Rip out the user-creation code in the current join mechanism (but leave the CreateMemberFolder? bit)
• Rip out the part which creates a user folder when during portal instantiation