title: implementing single sign on using LDAP
body: <p>We want to develop application for customer which uses <code>LDAP</code> for authentication makes it use for single sign on <code>(SSO)</code> technique.We are very beginner about this topic.</p>
  
  <p>What we think about <code>LDAP</code> upto now is(Correct me if i am wrong):</p>
  
  <ol>
  <li>There is <code>LDAP server</code> somewhere which contains users and its
  associated role.</li>
  <li>when user browse our web application it asks to enter username and
  password (which is actually credentials for <code>LDAP server</code>)</li>
  <li>when <code>LDAP server</code> authenticates it sends a token to our web
  application ,we put that token in cookies and use this token to
  authenticate users for every web application with in our domain.</li>
  <li>so using this technique we do not have to make additional modules
  for <code>user managemen</code>t.</li>
  </ol>
  
  <p>what we are missing ?</p>
  
  <p>Any idea will be appreciated/</p>
  
  <p>Thanks in Advance </p>