Educause Security Discussion mailing list archives

Re: Mobile Apps: Authentication?


From: Kevin Shalla <kshalla () UIC EDU>
Date: Tue, 15 Mar 2011 14:46:54 -0500

Perhaps I'm missing something, but why do people want to create mobile apps? Why not simply develop Web sites that have a mobile CSS style sheet built in them?

On 3/15/2011 11:33 AM, Theresa Rowe wrote:
I'm interested in this too. I am specifically separating mobile app from mobile web site in this discussion. While we have supported development of mobile web sites that have logins to critical systems, we have not deployed apps yet that support logins to critical systems. We have an app development project underway that will be consumer information in orientation, and we've specifically excluded anything involving authentication with our LDAP directory because we do not know enough about security implementation in that environment. I think our first entries into this area will be with vendor supplied products.

Theresa Rowe

On Tue, Mar 15, 2011 at 12:04 PM, Martin Manjak <mm376 () albany edu <mailto:mm376 () albany edu>> wrote:

    As the great mobile migration accelerates, I wonder if anyone has
    deployed an app that has an authentication component.

    I know certain schools have developed (or bought?) custom apps for
    their
    campuses that provide maps, dining hall menus, etc.

    I writing to the list to see if anyone has
    developed/deployed/purchased
    a mobile app that integrates into a CMS, for example. Or any IT
    service
    that requires authentication.

    I realize that people can use the mobile phone browser to submit
    credentials via the traditional portal or web-based authentication
    methods. I don't think the security issues in those cases are any
    different from using a laptop.

    But it would be interesting to see if anyone has written a native app
    for a mobile platform that addresses the authentication process.

    Marty

    --
    Martin Manjak
    Information Security Officer
    University at Albany
    CISSP, GSEC, GCWN

    "What information consumes...is the attention of its recipients."
    Herbert Simon, 1971




--
Theresa Rowe
Chief Information Officer
Oakland University



Current thread: