Re: Mobile Apps: Authentication?

[Theresa Rowe <rowe () OAKLAND EDU>]

I'm interested in this too.  I am specifically separating mobile app from
mobile web site in this discussion.  While we have supported development of
mobile web sites that have logins to critical systems, we have not deployed
apps yet that support logins to critical systems.  We have an app
development project underway that will be consumer information in
orientation, and we've specifically excluded anything involving
authentication with our LDAP directory because we do not know enough about
security implementation in that environment.  I think our first entries into
this area will be with vendor supplied products.

Theresa Rowe

On Tue, Mar 15, 2011 at 12:04 PM, Martin Manjak <mm376 () albany edu> wrote:

> As the great mobile migration accelerates, I wonder if anyone has
> deployed an app that has an authentication component.
>
> I know certain schools have developed (or bought?) custom apps for their
> campuses that provide maps, dining hall menus, etc.
>
> I writing to the list to see if anyone has developed/deployed/purchased
> a mobile app that integrates into a CMS, for example. Or any IT service
> that requires authentication.
>
> I realize that people can use the mobile phone browser to submit
> credentials via the traditional portal or web-based authentication
> methods. I don't think the security issues in those cases are any
> different from using a laptop.
>
> But it would be interesting to see if anyone has written a native app
> for a mobile platform that addresses the authentication process.
>
> Marty
>
> --
> Martin Manjak
> Information Security Officer
> University at Albany
> CISSP, GSEC, GCWN
>
> "What information consumes...is the attention of its recipients."
> Herbert Simon, 1971



-- 
Theresa Rowe
Chief Information Officer
Oakland University