I have setup a JSON feed to allow single sign-on to another system. Currently the
entry_id and email are used as part of the URL string to access the 3rd party system, but this number could be guessed. I would like to provide some security by outputting an alphanumeric string as one of the fields, and using this in the URL instead.
Is it possible to have such a string created automatically in a new field when an entry is created? Are there other options for implementing this type of security?
So currently the single sign-on URL looks something like:
externalId is a combination of the entry_id and email address of the user.
I want it to be more like:
I'm not sure where to start - any advice or suggestions welcome.