Sharing authentication b/w two apps

15y2.2k.NET

I'm having two forms authentication based applications hosted as different site in IIS.
As per the requirement, I want to show some of the pages (second app) from One application to the application(first app) by using IFrame. The two web applications are built in ASP.net MVC 2.0 and .net framework 3.5.

Now,if the user logged in one application (First app), i don't want ask the user loggin again in the other application(second app)
and we are not using SSO.

Its a kind of sharing authentication information between two different web apps.

Can you guys suggest me the best way to achieve this?

5 Replies

Know the answer? Post it — somebody with the same question will find it here.

Suthish Nair15y ago
"pageflakes" no idea i never used it.
0
15y ago
Suthish,
As per the client requirement, SSO option may be in the later but not now.
Can I use pageflakes option here ?

Praneeth,

Currently we are storing the sessionstate in sql server. Help me how I can reuse the sessionstate values b/w two apps?
0
Praneeth Kumar15y ago
Have you thought of sharing your session using a state server or sql server??
0
Andrew Fenster15y ago
You have two applications. When the user logs in, you log him into both applications. He now has two security cookies, so he can switch back and forth between pages of each application. When he logs out, you log him out of both applications.

You can do the dual login behind the scenes. The user doesn't have to see what's happening. You log the user into application #1, then redirect to a hidden page of application #2. There you log him into application #2 and immediately redirect back to application #1. The user doesn't see any of this, but he now has cookies for both applications.

You can use roles or other measures to control which parts of each application your user can access.
0
Suthish Nair15y ago
The best way is handle the iframe dynamically and passing query string if needed.

Or other way is using POST method.

for eg.. in your 1st application having a page with iframe:

iframe.Attributes["src"] = "about:blank";

iframe.Attributes["src"] = "http://www.c-sharpcorner.com?id=1";

but due to cross domain, you need to handle javascript/ajax related works on your home page.

Beware of hacking using iframes.

Why not SSO, its best way..

0