What is your goal? Simple sign in with light security? Or, heavy security.
Passport is a decent example of a site with heavy security, but it is rather
difficult to create this functionality yourself as browsers are becomming
smarter at finding cross-browser attacks, etc. While you are not attacking,
the code will be seen in the same manner.
For light security, you can embed an iframe in multiple sites. If the user
is not logged in, boot him to a login page. it is simple to employ, but
could be caught by a browser.
Passport is an option, of sorts, although MS is completely scrappign the
current implementation. There are other solutions like this.
You can embed controls on the page that check security, but this requires
users have the plug in necessary to use the control. This can be Java,
Flash, ActiveX, etc. depending on your audience.
I know of no examples on a "roll your own" multi-domain scenario. If you
find one for .NET, post. It would be an interesting link to look at.
--
Gregory A. Beamer
MVP; MCP: +I, SE, SD, DBA
http://gregorybeamer.spaces.live.com
*************************************************
Think outside the box!
*************************************************
"Jimmy" <am******@gmail.comwrote in message
news:11**********************@j44g2000cwa.googlegr oups.com...
I'm trying to find a website that does the following:
1. Signs you up to a second site under a different primary domain (i.e.
as a result of a checkout or something). The username and password may
be automatically generated.
2. Sign-ons for you and redirects you to the second site without the
need of you signing up or signing in and without cookies (as the top
domains are different)
I can't find an example of such a site. Do you know any?
Thanks,
Jimmy
