> I think this is a complete misunderstanding on your part No, but it is a complete assumption on your part. ;) SSO within a cluster of services, with a common owner etc makes perfect sense. Who wants to have multiple accounts across a number of products with a single vendor for example? (you know who you are!) SSO across dissimilar platforms, different vendors etc simply trades convenience for your security and privacy. In a perfect world, your SSO provider would be entirely independent, host all their auth in a bullet-proof system, and for the price of a few API calls, life would be peachy. As it is though, it's not. Facebook for example have their own problems in keeping their auth data secure, so tying yourself into their systems adds a whole world of additional risk to your site. And in the event of it all going pear-shaped, there isn't a lot you can do to fix the situation, without exiting the SSO. Martin... ---------------------------------------------------------------------- CONFIDENTIALITY: This e-mail and any files transmitted with it are confidential and intended solely for the use of the recipient(s) only. Any review, retransmission, dissemination or other use of, or taking any action in reliance upon this information by persons or entities other than the intended recipient(s) is prohibited. If you have received this e-mail in error please notify the sender immediately and destroy the material whether stored on a computer or otherwise. ---------------------------------------------------------------------- DISCLAIMER: Any views or opinions presented within this e-mail are solely those of the author and do not necessarily represent those of Corsaire Limited, unless otherwise specifically stated. ---------------------------------------------------------------------- Corsaire Limited, head office: Unit 2 Grosvenor Court, Hipley Street, Old Woking, Surrey GU22 9LL. Telephone: +44 (0)1483-746700. Registered in England No. 3338312. Registered office: Portland House, Park Street, Bagshot, Surrey GU19 5PG.