a webservice to authenticate the users against

[J-T]

I need to create a webserivce which is able to talk to the following
components:

1) Another webservice which is written by java and talks to its own backend
database to authenticate the users
2) Directly talk to a sql server database containg a table to store username
and passwords
3) Directoly talks to an Oracle Databse containg a table to store username
and passwords
4) Can query our internal Active Directory to authenticate our
organization's staff

The reason I choose a web service is that we want to create a sort of signle
sign on startegy for all our applicationsm to use this webserivce to
authenticate the users against. my webserivce needs to be secure and also
vey expandable to span future added components.

Is there soehting similar out there or can anyone give me some idea?

I really appreciate it.

Thanks

Lester J-T

[DC]

sounds like a great place for defining an authentication interface for all
those subsystems.

public interface IAuth
{
public bool ValidateUser(string username, string passwordHash);
// etc
}

Then just provide the implementations for the 4 flavors (java ws, sql,
oracle, AD), then create your front-end webservice that delegates to one of
those implementations. I guess you could specify the implementation to use,
within web.config.

[WebService]
public class MyAuthnService
{
IAuth authService= // ??? figure out how to select among the
implementations

[WebMethod]
public Login(string username, string passwordHash)
{
if (authnService.Validate(username,passwordHash)) {
// use can log in...
}
}
}

-D

"J-T" <J-*@nospam.com> wrote in message
news:uh*************@TK2MSFTNGP10.phx.gbl...

I need to create a webserivce which is able to talk to the following
components:

1) Another webservice which is written by java and talks to its own
backend
database to authenticate the users
2) Directly talk to a sql server database containg a table to store
username
and passwords
3) Directoly talks to an Oracle Databse containg a table to store
username
and passwords
4) Can query our internal Active Directory to authenticate our
organization's staff

The reason I choose a web service is that we want to create a sort of
signle
sign on startegy for all our applicationsm to use this webserivce to
authenticate the users against. my webserivce needs to be secure and also
vey expandable to span future added components.

Is there soehting similar out there or can anyone give me some idea?

I really appreciate it.

Thanks

Lester J-T

[J-T]

I am just wondering if .Net framework 2.0 (which I suppose should support
WSE 2.0 ) is a better framework to achieve this?

What you think?
Thanks for your time in advance.

"DC" <di****@online.microsoft.com> wrote in message
news:%2******************@TK2MSFTNGP12.phx.gbl...

sounds like a great place for defining an authentication interface for all
those subsystems.

public interface IAuth
{
public bool ValidateUser(string username, string passwordHash);
// etc
}

Then just provide the implementations for the 4 flavors (java ws, sql,
oracle, AD), then create your front-end webservice that delegates to one
of those implementations. I guess you could specify the implementation to
use, within web.config.

[WebService]
public class MyAuthnService
{
IAuth authService= // ??? figure out how to select among the
implementations

[WebMethod]
public Login(string username, string passwordHash)
{
if (authnService.Validate(username,passwordHash)) {
// use can log in...
}
}
}

-D

"J-T" <J-*@nospam.com> wrote in message
news:uh*************@TK2MSFTNGP10.phx.gbl...

I need to create a webserivce which is able to talk to the following
components:

1) Another webservice which is written by java and talks to its own
backend
database to authenticate the users
2) Directly talk to a sql server database containg a table to store
username
and passwords
3) Directoly talks to an Oracle Databse containg a table to store
username
and passwords
4) Can query our internal Active Directory to authenticate our
organization's staff

The reason I choose a web service is that we want to create a sort of
signle
sign on startegy for all our applicationsm to use this webserivce to
authenticate the users against. my webserivce needs to be secure and also
vey expandable to span future added components.

Is there soehting similar out there or can anyone give me some idea?

I really appreciate it.

Thanks

Lester J-T