Using WebISO with Single Sign On module

Home Forum General Using WebISO with Single Sign On module

This topic contains 0 replies, has 0 voices, and was last updated by  Dennis @ PerfectForms 7 years, 10 months ago.

Viewing 1 post (of 1 total)
  • Author
    Posts
  • #691

    A user has chosen to leverage WebISO to gather authenticated user information with our Single Sign On module rather than the traditional Active Directory/LDAP. They discovered that the URL query string exposed the user ID allowing someone to simply change it to another user ID, and access/change another user’s information.

    The solution to the problem is to use SSO and also Gateway HTTPuser parameter inside the form to get the credentials of the users trying to use the form.

Viewing 1 post (of 1 total)

You must be logged in to reply to this topic.