We are building a small social media platform for collaboration among a group of similar (but disparate) organizations. Each organization will have a small group of users who will be able to post content on this platform.

What would be the recommended ways for these users to create accounts on our social media platform? Our primary concern is if any member of the group leaves the parent firm, then his access should be revoked immediately from the platform too. He/she would obviously know the credentials, since he/she was a part of the entitled users earlier.

We are planning to host our platform on a cloud provider like MS Azure or AWS.

Thanks in advance

  • If only selected users from selected organizations can use the platform, can you use the infrastructure of those organizations to do the authentication (checking the credentials) and part of the authorization (is the account still active) for you? If not, how will you know that a user has left their firm? Jun 27 '19 at 8:46
  • I probably can, but that would require something to be available on the orgn's infrastructure. I was wondering if there is any way to perform an automatic sync between the organization's user activity and their user base on our platform. So if someone leaves the firm, the user base syncs up automatically on our platform.
    – Vikas
    Jun 30 '19 at 22:11
  • Are you suggesting using SSO from the internal organization infrastructure? Something similar to Federated Identity?
    – Vikas
    Jul 1 '19 at 1:08
  • I was not thinking of a particular technology, but I did have OAuth in the back of my mind. To do the automatic sync, you also need something on the org's infrastructure to sync with. Jul 1 '19 at 5:40
  • Thanks, i will investigate OAuth0 for this too.
    – Vikas
    Jul 2 '19 at 1:56

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.