We are building a multiplatform architecture application in which we have an authentication consideration we're not finding a solution to.
We have a front end platform which has SSO with Force.com and interacts with our salesforce organisation where business processes are touched. The front end also does client side webservice calls to a big data database for searches on our catalogue (the database has some key features which salesforce can not compete with).
Now, the issue is that we want an airtight authentication and authorization in the application layer on top of the big data database. We'd like to keep a synchronized state of active user sessions between salesforce and a copy in the bd database. Is it possible to hook in (trigger of some sorts) to the salesforce user session lifecycle events, and say know when a user session start and ends so we could send an synchronizing update ?