Tell me more ×
Programmers Stack Exchange is a question and answer site for professional programmers interested in conceptual questions about software development. It's 100% free, no registration required.
up vote 2 down vote favorite

Our clients need to authorize our partners to release data to us. We can collect this data via a push/pull mechanism. Since our partners have never shared data before, they don't have OAuth implemented.

What is the best way for clients to tell their service providers (our partners) to release data to us without having each partner bear the overhead of implement OAuth. Is there a standard practice for this sort of an authorization? Thanks!

share|improve this question
Why would you want to do without OAuth? It has been developed specifically for this use case. Implementing it and offering it as a secure way for their users to allow others access to their data should be a very interesting selling point/feature as it means users won't have to proliferate their user/password all over the place. – Marjan Venema May 13 '12 at 10:00
A bit too vague - what kind of data are you talking about? – Oded♦ May 13 '12 at 10:00
This is personal information that our partners collect. Traditionally this data hasn't been shared. Some partners don't have enough customers to justify spending resources on implementing OAuth. While I agree OAuth is the right option for this case, we have several thousand partners and it's going to take some work to convince/help each one to implement OAuth. In addition, clients don't have login credentials as they don't have to interact with our partner after they sign-up with them. – Nick Karnik May 14 '12 at 9:52

Know someone who can answer? Share a link to this question via email, Google+, Twitter, or Facebook.

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.