What good business-to-business web portal security systems/methodologies can people suggest? I have been given a list of requirements of which most are standard but one of the main (and killer) ones is that if an employee leaves our customer's company then they must not be able to get into the system to access their old employer's data. However this solution needs to work on all our customers, from major, multinational corporates to one-man-bands in the middle of nowhere who are still on dial-up internet. This means that, as far as I can see it IP checking is out, hardware tokens aren't a good option as the users could take them with them and active-directory links are impractical. Any suggestions would be gratefully received (this is getting rapidly to the "Help me Obi Wan, you're my only hope" stage, hehe).
...
Go to the complete details ...