Single Sign-On with Forms Authentication

[Gabriel Giraldo]

Hello,

I'm trying to integrate the security (authentication) of several web
applications on my enterprise (we do not have active directory implemented
yet).

I would like to implement a Passport-like authentication system, but based
on Forms Authentication: a system where users authenticate once and access
all of our ASP .NET web applications without needing to provide passwords
again.

Is there any way to accomplish this with Forms Authentication? As far as I
have tested, each ASP .NET Application configured with Forms Authentication
handles its own authentication cookie. Is there any way to unify this
authentication cookie between applications?

Thanks for your help.

 

[Dominick Baier [DevelopMentor]]

Hello Gabriel,

yes, this is possible

make sure the following attributes of you forms auth config are the same
for all apps

- machineKey
- cookie name
- cookie path

read more here:
http://weblogs.asp.net/hernandl/archive/2004/06/09/ssoformsauth.aspx

 

[Gabriel Giraldo]

Thanks a lot. Just what I need!

Hello Gabriel,

yes, this is possible

make sure the following attributes of you forms auth config are the same
for all apps

- machineKey
- cookie name
- cookie path

read more here:
http://weblogs.asp.net/hernandl/archive/2004/06/09/ssoformsauth.aspx