Friends,
I have a requirement to implement single sign-on on my web sites. I cannot guarantee that the sites are done in a single technology, language, or are going to be hosted under same subdomain. Mine is a group of corporate web sites, where another authentication mechanism (such as OAuth) is not desired because of the redirection to a third-party web site. I have custom SSO implementation based on a central session maintained at the authentication site along with an encrypted token with a time stamp, but I am not sure if that is the best one to adopt. I would like to know if there any free alternative implementation that I can use to authenticate against my own database.