RE: Pass credentials from one web site to another for seamless login

From: David Coe, MCAD (DavidCoeMCAD_at_discussions.microsoft.com)
Date: 06/24/04 

Date: Thu, 24 Jun 2004 11:36:02 -0700

You could pass your credentials via the query string (not necessarily a good idea), or call a web service at the other site. The web service would be responsible for authentication and authorization, setting the session information, etc.

"TS" wrote:

> I have a partner company that has a web site that I need to gain access
> through the web site in my company. I need to be able to log into my site
> and then have somekind of way to then access this other site that also
> requires a login in a way that allows me to pass a set of credentials to
> this other site which uses those credentials to log me in so that I don't
> have to log in again. The credentials that I want to pass would be a
> predetermined set of credentials based on the credentials used to login to
> my site; one for read only or one for admin priveledges.
>
> I am using windows authentication on my web site, and the other site is
> using session authentication using Java and Cold Fusion. The sites are on
> different networks at 2 separate companies.
>
> I figure what I can do is pass credentials to one of their web pages that
> creates a session for the browser, and authorizes this session as READ ONLY
> or Admin and then will redirect to the appropriate place on their site.
>
> Does this sound good or do I need to do something else?
>
> If I use this approach, what are my options to pass these credentials?
>
> thanks!
>
>
>

Relevant Pages

  • Re: WSS Web Service Security
    ... I assume you guys are using basic authentication. ... I have a web service (a DIME receiver currently sitting outside WSS because ... I can't get it to work inside without breaking the WSS services). ... However without defining credentials in the web service I can't get ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: <identity impersonat=> problems.
    ... I have a web service configured with Anonymous access disabled. ... if I change the element and add the "username" ... that the web service authentication use, ... Probably because you cannot impersonate and delegate the encrypted credentials (authenticated via ...
    (microsoft.public.dotnet.security)
  • Re: Pass through credentials to web service
    ... It is the double-hop' limitation of NTLM authentication. ... application server, the server cannot then use those credentials to ... >I have a client application that calls a web service. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Proxy Web Authentication
    ... I had tested this configuration, but my explorer ask me time and time again, ... As if the explorer not is capable to pass the credentials to ... There will be a list of authentication methods which you can ... session of web protocol, he is authenticated. ...
    (microsoft.public.isaserver)
  • Re: How to close LAN session and login as another credentials
    ... and is connected to a share on the server. ... these credentials, since it will automatically try to use the credentials of ... The problem is that from 1 login session on a PC, ... When I try to access administrator share ...
    (microsoft.public.windowsxp.network_web)