We have a set of various web applications dedicated to our distributors and partners. Some are standard packages such as Alfresco, others are custom-made web sites.
All are protected by a login. We'd like our users to have a single login for all these apps. Therefore, we are considering setting an OpenLDAP server to serve all these apps authentication requests.
Where should we store application-specific user rights? Such as, who can use app1, who can use app2 and with which role? Should it be stored in LDAP or in the application DB?
In other words, should we keep LDAP simply for basic identity/authentication look up and keep track who can use which app in each app's DB? Or can we store all this info in LDAP (it would make sense)?
TIA for shedding some light.