Single Sign-On Implementation: Security Issues and Best Practices
slashid.com