I was hoping to allow clients to log into a published project blog via a Joomla web site. If the client enters a password protected area of the site then they can work on the project, rather than having to link from their email. The page could also have a linked calendar present too.

In my Safari test - the client can successfully log in, and (after I set the wrapper module preferences to “show scroll bars”) the project blog displays correctly. 

However, I have some questions:

Is this approach secure?
There appears to be no way to time-out sessions by an external client so they are not always logged in.

Is there a work-around that makes it possible to use one wrapper for more than one client?
If each client gets a unique link, is there some way for the wrapper module to register the client and show their unique project blog url from a url list built in the Sql database?

Is there an API that achieves this integration much better than a wrapper module?