CorSSO Goals
Provide a single sign-on abstraction
Trustworthy: Enable applications to tolerate
failed and compromised authentication servers
Scalable: Decouple from numbers of users and
applications, avoid bottlenecks
Flexible: Express wide range of policies