Security
Our preferred approach is to use a trusted login, single sign-on method of authentication where the user logs into the university or corporate site, then WebRoomz uses a shared secret key to validate the user as defined by the university or company. Once logged into the WebRoomz system, users always operate within a defined security context, based on their role for any given task. WebRoomz uses several guiding principles in the design of a secure system. For example, we:
Constantly look for ways to reduce our “attack profile”. This is an ongoing exercise to scrutinize every service that runs on our servers.
Employ the principle of “least privilege” to limit the exposure from a service request.
