HighTechTalks DotNet Forums  

Single signon (with FormsAuth) for mutliple web apps

ASP.net Security microsoft.public.dotnet.framework.aspnet.security


Discuss Single signon (with FormsAuth) for mutliple web apps in the ASP.net Security forum.



Reply
 
Thread Tools Search this Thread Display Modes
  #1  
Old   
Brad
 
Posts: n/a

Default Single signon (with FormsAuth) for mutliple web apps - 09-24-2003 , 03:38 PM






I'm working on single signon for multiple web apps on a single domain. If I
authenticate in wepApp1 then I am authenticated in webApp2 however, anywhere
in the global.asax code of webApp2 the following don't seem to be
set/initialized:
Request.IsAuthenticated
User.Identity
The authentication cookie is available in webApp2's global.asax and once
a form is loaded (i.e. I'm on a pageload event) the values of
Request.IsAuthenticated and User.Identity are available.

So why would the values of user identity and IsAuthenticated not be
avaialble in the global.asax of webApp2?


Thanks


Brad




Reply With Quote
  #2  
Old   
Chris Jackson
 
Posts: n/a

Default Re: Single signon (with FormsAuth) for mutliple web apps - 09-25-2003 , 09:42 AM






In terms of your code, both of your assemblies (one for each we application)
are completely separate. One assembly doesn't get to read from the other,
even though they are in the same App Domain. The ability to read the cookie
by both essentially serves as the cross-assembly communication mechanism
(visualize it as serving a similar function to named pipes); others are
available, but this is probably the easiest.

One solution I have implemented is to create a custom logon page that looks
for a cookie that indicates authentication. If I find a valid cookie, then I
go ahead and set up that user as authenticated and return to the page that
requested the authentication. If I don't, then I display the page as normal
and have them enter their user/pass.

--
Chris Jackson
Software Engineer
Microsoft MVP - Windows XP
Windows XP Associate Expert
--
"Brad" <nospam (AT) co (DOT) lane.or.us> wrote

Quote:
I'm working on single signon for multiple web apps on a single domain. If
I
authenticate in wepApp1 then I am authenticated in webApp2 however,
anywhere
in the global.asax code of webApp2 the following don't seem to be
set/initialized:
Request.IsAuthenticated
User.Identity
The authentication cookie is available in webApp2's global.asax and
once
a form is loaded (i.e. I'm on a pageload event) the values of
Request.IsAuthenticated and User.Identity are available.

So why would the values of user identity and IsAuthenticated not be
avaialble in the global.asax of webApp2?


Thanks


Brad






Reply With Quote
  #3  
Old   
Brad
 
Posts: n/a

Default Re: Single signon (with FormsAuth) for mutliple web apps - 09-25-2003 , 07:07 PM



I found the problem....basicaly a brain lapse on my part after being away
from hands-on coding for a few months.
I can access the authentication info just fine but I need to do it in
Application_AuthenticateRequest. Once I did that then everything works as I
expected: Identity is avaialble and IsAuthenticated is true is the user is
logged in.
Brad


"Chris Jackson" <chrisj (AT) mvps (DOT) org> wrote

Quote:
In terms of your code, both of your assemblies (one for each we
application)
are completely separate. One assembly doesn't get to read from the other,
even though they are in the same App Domain. The ability to read the
cookie
by both essentially serves as the cross-assembly communication mechanism
(visualize it as serving a similar function to named pipes); others are
available, but this is probably the easiest.

One solution I have implemented is to create a custom logon page that
looks
for a cookie that indicates authentication. If I find a valid cookie, then
I
go ahead and set up that user as authenticated and return to the page that
requested the authentication. If I don't, then I display the page as
normal
and have them enter their user/pass.

--
Chris Jackson
Software Engineer
Microsoft MVP - Windows XP
Windows XP Associate Expert
--
"Brad" <nospam (AT) co (DOT) lane.or.us> wrote in message
news:%23SiEhvtgDHA.3828 (AT) tk2msftngp13 (DOT) phx.gbl...
I'm working on single signon for multiple web apps on a single domain.
If
I
authenticate in wepApp1 then I am authenticated in webApp2 however,
anywhere
in the global.asax code of webApp2 the following don't seem to be
set/initialized:
Request.IsAuthenticated
User.Identity
The authentication cookie is available in webApp2's global.asax and
once
a form is loaded (i.e. I'm on a pageload event) the values of
Request.IsAuthenticated and User.Identity are available.

So why would the values of user identity and IsAuthenticated not be
avaialble in the global.asax of webApp2?


Thanks


Brad








Reply With Quote
  #4  
Old   
AT
 
Posts: n/a

Default Re: Single signon (with FormsAuth) for mutliple web apps - 09-25-2003 , 09:24 PM



Hi Brad,

I am glad to know that the problem is resolved.

Thank you very much for sharing your solution. It is helpful to everybody
here.

Best regards,

Jacob Yang
Microsoft Online Partner Support
Get Secure! ¨C www.microsoft.com/security
This posting is provided "as is" with no warranties and confers no rights.


Reply With Quote
Reply




Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Powered by vBulletin Version 3.5.4
Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.