I want to be able to offer people who use my website, integration with their in-house authentication system (LDAP, I guess, since I don't want to limit it to a solution that only works for Windows users).
The goal is for a user to be able to log on to my website using their corporate user ID and password (or, even better, not have to log on at all, if they are already authenticated).
Sadly, I'm very ignorant of such things.
Is there a way to do this safely, and in such a way that each such integration isn't an enormous undertaking?
What pitfalls should I be aware of?
Are there any timeless resources on such topics that might be recommended?