LDN - Luminis Developer Network

Hi All:

 At Old Dominion University, we are trying to implement Banner Channels. We have already configured the middle tier and SSO for them and they are working fine. But we are baffled with the security concern and we would like to have input from the community members. I have attached a file "https_popup.jpg". This file suggests that if we implement the full-SSL on the portal, then we receive the pop-up errors for the mixed content. We have mixed content because we retrieve the information from various places other than portal and content will have https as well http traffic together.

If we implement the partial SSL as shown in "start.jpg", then we have some data that are not secured and personal information will be visible over the wire. The red circle on both the files suggests the potential pit falls for different implementation.

Do not forget that our SSO are secured. And we are talking about the real content inside the Banner Channels.

Question:

 (1) How do other schools with middle-tier implementation have achieved compromise in both the situation?

 Any insights will be helpful.

Thanks,

Milind