LDN - Luminis Developer Network

Hello

we are trying to develop custom channels that require sso to external systems for functionality and delivering in line content.

First response to do this would to use a CPIP web proxy. However I am checking with SCT regarding how secure this is given dependency on the 2.1 uPortal version. Also we have managed to grab user credentials in our old Novel Portal and it looks like you can in uPortal proper.

I was wondering if anyone has any thought/experience/things to add regarding acessing credentials from a channel?

We have had prelimary thoughts about the following:

1 Grabbing the password when a user logs in and storing it with encyption in the luminis server session. We believe this is risky as luminis could be invalidating old sessions.

2 Trying to get the credentials from the IPerson SecurityContext but luminis seems to have their implemenetation of IPerson credentials that seem impossible to get at from a channel.

3 Writing a cpip response connector that returned the password but the user session/ sid used to return this doesn't seem accessable from a channel when making a call

cheers