Monday, March 26, 2012

Windows AUthentication - bypassing login screen...?

If I create my own custom login code then I can theoretically pass a username and password in an encrpted query string and auto validate a person signing into a site.
Can this be done for a site running Windows Auth?
WOkaIn the web config file, try by adding:<identity impersonate="true" userName="windows_user_name" password="his_password" />
Would say yes - MCMS 2002 allows this, allow I'm not too clear on the "how".
Perhaps look at the FormsAuthentication class - the Authenticate method accepts a username & password, and then use impersonation (if necessary)?

Apart from that - must ask; why custom auth when integrated is available?
Hmmm. Sorry, I didn't explain myself enough.

Say you wrote Site A, using Windows Auth, and I wrote Site B.
Site A and Site B have nothing in common.
Now I have a link in Site B, that sends me to Site A...but I don't want to get the login prompt, I want the login to be done automatically...I have the login credentials for Site A.

Make sense?

WOka
You need to search for Single Sign-On (SSO) with ASP.NET

Have a look here too
http://www.123aspx.com/redir.aspx?res=35762

0 comments:

Post a Comment