A newbie question on SSO

From: Holysmoke (Holysmoke_at_discussions.microsoft.com)
Date: 10/08/04 

Date: Fri, 8 Oct 2004 00:23:03 -0700

Hi,

I am trying to implement a SSO using FormsAuthentication for all my
applications.
When Authenticated, I am saving ApplicationID and RoleID in CSV form and
store it on the cookie.

Here is the sequence of events I try to implement

When an user requests an web application for the first time, he/she is
redirected to my SSO Web application
which does authentication and retrieves list of applications and its
respective roles and store on the ticket/cookie.

When the user requests a new web application (ie., when he/she changes to
the new url)
I would like to pass the Ticket(cookie) which I have created before to a web
service and check this user
has some role to this application or not.

For implementing this logic,
I would like to know which global.asax event should I use? I see
OnAuthenticationRequest event but don't know
how to use it. Can you explain how that event works as I see little
documentation about it in MSDN.

I appreciate your help and comments,

Holy

Relevant Pages

  • Re: A newbie question on SSO
    ... First time he/she is redirected to SSO ... I want to redirect to a page saying you have no access. ... > Here is a post that will show you SSO with Forms Authentication. ... >> which does authentication and retrieves list of applications and its ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: A newbie question on SSO
    ... Here is a post that will show you SSO with Forms Authentication. ... > which does authentication and retrieves list of applications and its ... > When the user requests a new web application (ie., ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Good SSO Technologies for .NET/Windows?
    ... We're looking to implement SSO across several applications - some that we ... User authentication will be against database ... sources - i.e. App A, B may share a set of users while App C, D will be ...
    (microsoft.public.dotnet.languages.vb)
  • RE: FormsAuthentication ReturnUrl - need it to be Absolute
    ... I understand you have multiple ASP.NET applications ... which are using forms authentication to protect the application. ... the forms authentication cookie across multiple applications, ... If the forms authentication cross site support doesn't suit your scenario. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Same question - Why use a DataTable in ASP .NET?
    ... When a good deal of memory is consumed, ... For small web applications that don't get ... once you start thinking "high load" ... other words, if you have a primary key, store it in the session, not ...
    (microsoft.public.dotnet.languages.csharp)