Single sign on for multiple asp.net sites

[sudhaoncyberworld]

Hi Techies

I have general question more similar to single sign on of sharepoint
site.

I have two asp.net sites SiteA and SiteB with forms authentication
enabled. Lets assume its available in same server. SiteA and SiteB
users and credential informations are same.

If UserA logged in SiteA using some credential, the same credential
must be used to authenticate SiteB from client side. How we can
acheive this?

In another way, the SiteA will have links to SiteB, when I click the
link I want to skip the login page of SiteB since I know the
credentials for SiteB, I want to internally authenticate from SiteA.
Is it possible?

Any help would be appreciated much,
Thanks
Sudha

 

[unitm]

Putting the info into a querystring passed via URL, (response.redirect -- blah.aspx?moop=&moopa=) then after the querystring is caught, redirect so the user will not see the url with the querystring (on page_load -- if not request.querystring("moop") is nothing or not request.querystring("moopa") is nothing then -- do function, add values to viewstate or session on new site, response.redirect blah.aspx << clears querystrings). Still security problems with that, but you can also make a third party cookie to work across sites. Some spyware apps pick those up, however, and report as malware. Just a couple thoughts.

 

[Guest]

Take a look at this link:

http://www.codeproject.com/aspnet/aspnetsinglesignon.asp

HTH
Braulio

/// ------------------------------
/// Braulio Diez
///
/// http://www.tipsdotnet.com
/// ------------------------------

 

[Guest]

Hi Sudha,
one way you can go if your applications are sitting on the same server is to
modify directory structure. Create one virtual directory with two
subdirectories (also virtual). Put your application into those sub
directories and login page into top directory.
Another more common way is described in Altair's post on Code Project as
already Braulio mentioned. This technique can be used only if your
application shares same subdomain.
If your application do not share subdomain you have to implement third
applicaton wich will log on users to your other applications. This is
possible if you use cookiless authentication tickets and
enableCrossAppRedirects set to true:
<authentication mode="Forms">
<forms cookieless="UseUri" enableCrossAppRedirects="true" ... />
</authentication>

Regards,
Ladislav