This one is a doozy, so be forewarned! Also please let me know if this isn't on the correct site.
What I would like to implement in the form of a server appliance is a single sign on solution that would integrate with "cloud" apps such as salesforce.com or google apps. But I would also like this initial login to determine what websites the user can access. I really don't know the terminoligy that is involved with all of these things, so I will try to paint a picture step by step:
User sits down at computer, opens website and is directed to a SSO login page (without logging in the user can't access any other sites, similar to a coffee shop).
After logging in, the user is connected to a SSO portal with links to launch the various web applications. User can now access allowed websites.
User logs out and now back at step one.
What I am trying to do is remove the network authentication from the computer and place it into the web browser, if that makes sense? The thought is less reliance on the operating system and local infrastructure, and more emphases on integrating the "cloud" services. I would like to either find similar software, or possibly start putting a group together towards a open source type project that could be built on linux?
I know this is off the wall, but if anyone could at least possibly name the technology or protocol that would be used in each step, it would be really appreciated.