Hi all,
I'm looking to implement a single sign on solution for .NET applications.
This single sign on solution will need to work against a variety of back-
end databases (i.e. SQL (mainly), Active Directory (some), Custom Data
Sources (XML, MDB, Custom Web Service, etc).
Is there any sample code on implementing a simple single sign on service?
The app would need:
-Log in Users from the web, desktop clients, custom applications, etc.
-Have granular permissions
-Be compatible with other web services, desktop apps, and remoting
(basically any sort of client/server)
-Have the ability to add trusted sites (i.e. servers, viewer consoles,
etc)
-Work with .NET 1.1 (most of our apps are still 1.1)
I was thinking of doing the following:
1. Build a security web service
2. Users would log into a web service to retrieve a token
3. Once a token is retrieve, it is used for all future communications
4. Applications check security against the security service via the Token
i.e.: CheckPermission (ByVal Token as GUID, ByVal Permission as String) as
Boolean
5. The Web Service would manage a list of valid tokens (time outs,
errors, etc)
Ecryption would be done primarily on the transport layer - but the token
could be encrypted too.
What do you guys think about this solution? It's simple... However, how
do you handled "trusted" sources?
Even better would be for me to find something that was prebuilt :-)
0  1432  This thread has been closed and replies have been disabled. Please start a new discussion. Similar topics | |
by: Peter Tragardh |
last post by:
I'm searching for info on how to authenticate a user in the same way that
for example Source Safe does. I would like my system to use Windows as the
authenticator, so that the user doesn't have to log on separately to access
my system.
|
by: Cowboy \(Gregory A. Beamer\) |
last post by:
Quite a few months back, I was able to create a single sign on app for all
apps on a single box (perhaps a domain, but never tested) by setting the
auth cookie name to an identical value:
<authentication mode="Forms">
<forms name="SingleSignOn" loginUrl="login.aspx">
</authentication>
I could then surf from app to app on the same box and the cookie, named the
same, would allow me to bypass the logon form. I currently have an app in
|
by: Rodney Lane |
last post by:
Hi
I am investigating the possibility writing an application which uses single
sign on with ASP.Net / VB.Net and was wondering if anyone has endeavoured to
do this yet.
I will most likely be using Site Minder as the single sign on engine, and
building the ASP.Net front end to drive it.
Does anyone know where I can find some code on how to manipulate standard
|
by: daniel |
last post by:
Hi,
i want to use dotnet web form to do SSO with AD now, but i don't know to do
it.
where can i look for relative article or sample code ?
thanks.
|
by: EricMatz |
last post by:
I work for a medium-sized insurance company, developing web-based systems for
our independent agents. There are four primary applications we provide - one
that serves as an agent portal (ASP), and three others that serve
applications specific to each line of business (one ASP, two ASP.NET). Each
of these applications reside on their own server/environment, all of which
are in the same AD domain. We also have multiple top-level domains...
| | |
by: aure_bobo |
last post by:
Hi all,
I'm currently developing a system with several webapps in ASP.NET/C#.
One of my website is used to login user : I will call this website
Webapp1.
Depending on the user attributes, I will send the user to an another
website (let's Webapp2 in my example), where I would like to login
automatically the user with the credentials entered in WebApp1.
|
by: Joe Fawcett |
last post by:
Dear All
We have an application where users login, their name/password details are
stored in a table, and now we want to add a third party bulletin board that
lives in its own virtual directory. Both applications are running on the
same IIS.
How do we authenticate users so that they don't have to sign in again
without passing their name and password in the querystring or request
header? The login details are the same for both...
|
by: Spam Catcher |
last post by:
Hi all,
I'm looking to implement a single sign on solution for .NET applications.
This single sign on solution will need to work against a variety of back-
end databases (i.e. SQL (mainly), Active Directory (some), Custom Data
Sources (XML, MDB, Custom Web Service, etc).
Is there any sample code on implementing a simple single sign on service?
The app would need:
|
by: Jai |
last post by:
Hi,
I have a problem related to Login System.
I am developing 3 websites for some institution.Now they want that if
anybody had sign up for there site1.com(say), than he or she should be
able to sign in for site2.com and site3.com.
hence, if user has sign up for the membership of site1.com than he/she
should automicallly become the member of site2.com and site3.com.
|
by: sudhaoncyberworld |
last post by:
Hi Techies
I have general question more similar to single sign on of sharepoint
site.
I have two asp.net sites SiteA and SiteB with forms authentication
enabled. Lets assume its available in same server. SiteA and SiteB
users and credential informations are same.
If UserA logged in SiteA using some credential, the same credential
|
by: jinu1996 |
last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth.
The Art of Business Website Design
Your website is...
| | |
by: Hystou |
last post by:
Overview:
Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...
|
by: tracyyun |
last post by:
Dear forum friends,
With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...
|
by: agi2029 |
last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own....
Now, this would greatly impact the work of software developers. The idea...
|
by: conductexam |
last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one.
At the time of converting from word file to html my equations which are in the word document file was convert into image.
Globals.ThisAddIn.Application.ActiveDocument.Select();...
|
by: adsilva |
last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
|
by: 6302768590 |
last post by:
Hai team
i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system
| | |
by: muto222 |
last post by:
How can i add a mobile payment intergratation into php mysql website.
|
by: bsmnconsultancy |
last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...
| |
