title: PHP: creating and consuming REST and authentication
body: <p>I'm planing to create a few simple REST web services to be used by some other applications (everything internal, not facing Internet). For certain reasons the applications should work with SSO (Windows, NTLM or other). The issue I have is how to do the authentication in the web service.</p>
  
  <p>The application calling the web service has no knowledge of the users password so I'm kind of lost on how to authenticate against REST without having the user to login? eg. avoid Basic Authentication</p>
  
  <p>I would like to avoid login due to simplicity for the user and not having to handle passwords in my applications. What are my options? Am I missing something obvious?</p>
  
  <p>Would this be a solution:
  create token, pass it to service and store it in database. web service checks if token exists in database. (expiration handling?)</p>