title: Which architecture for SSO between various public websites?
body: <p>I'm creating three websites which, in theory, users should have the same account for each one. Although with different attributes, the user email, login name, password, etc, is stored and handled by a single website (like user.mysso.com).</p>
  
  <p>Should I do that using a RESTful webservice on user.mysso.com that provides an interface for querying/authenticating users? Or is this insecure?</p>