I'm wondering what the best practice is here.
The use case here is the migration of a web application to Force.com as a managed package.
It's desirable to keep dev. costs to a minimum here, so we're looking into using a VF page that just embeds a page from the app provider's website.
The only unknown here is how we authenticate users. Currently all users log in to use the web application, however if we embed the page then users will need to log into SFDC and then login to the web app separetly.
We don't have much experience with SSO but from what I've read I don't think it's the right tool for this use case.
Does anyone have any suggestions on how to get around this issue?