I want to implement single sign on in my asp.net web application. Scenario is something like below:
user will get registered / sign up at "account.example.com"
there will a link to "professional.example.com"
when user goes to this link (step 2), they must remain logged in over here.
I need to create a single sign-on structure and my question is: is SSL a must?
Details:
The application will have a link to my web application. When the user clicks that link, their local username will be passed to my web app at which point a look-up in a mapping file is done. If that local username exists in the map, then the user is logged in. If not, then the user will be prompted to enter their network username and password, and when authenticated, an entry in the map will be created.
How do I ensure that user is who they say they are and not Joe Blow from off the street sending in an HTTP POST request with that username?
Do I have to use SSL (and if so, what does that entail)? Would adding a salt and encrypting the username be sufficient? Maybe locking it down so the source IP has to be within a controlled range?
My web app runs on IIS 6/7 and uses the ASP.NET MVC framework, if that is important.
I am trying to use the concept of Single Sign On (SSO) in my asp.net application.
for the purpose i have created a main domain say
mydomain.com.
now i have 2 subdomains
sub1.mydomain.com & sub2.mydomain.com.
I am running these very fine. But now I want to have a SSO for my domains. For the same have
googled lot and found some stuff such as adding machine key to web.config and specifying domain names in cookies.
But it is not at all working for me. when I specify the domain name for cookies i am unable to sign out.
I am using FormsAuthentication in asp.net.
Following is the code I have in my web.config.
[Code]....
I have the same code in web.config of each domain.
I have placed the code for each domain in different directory on my website.
for ex. mydomain.com ---------> F:/HostedSites/mydomain
sub1.mydomain.com ---------> F:/HostedSites/subdomain1
sub2.mydomain.com ---------> F:/HostedSites/subdomain2
my Authentication code is
[Code]....
and sign out code is
[Code]....
Can anybody tell me where exactly I am wrong ? what changes do i need to do at server end also.
I am checking this on my testing domain ie. mydomain.tv. can this be a problem ?
We migrated our web server to window server 2008, IIS 7.
We have single sign on application - that we login through one application called "users" and then no need to login to other applications, they all use the same machine key and cookie.
it works fine when all then applications under the same application pool.
but we have one application that is asp.net 2005. (the rest are asp.net 2003) the user application is in asp.net 2003 and that other application is in asp.net 2005.
so each application is in a different application pool. -
one pool to asp.net 1.1 and other pool to asp.net 2.
when I run the asp.net 2005 application
I get the login page and after I login I get the following errer:
HTTP 404. The resource you are looking for (or one of its dependencies) could have been removed, had its name changed, or is temporarily unavailable. Please review the following URL and make sure that it is spelled correctly.
Requested Url: /users/Unauthorised.aspx
Important: If I switch the "user" application (the login) to work under the same pool as my asp.net 2005 application, then it works fine with the asp.net 2005 application,but I get the above error for the asp.net 2003 applications
All this happened after we switched to IIS 7 Windows 2008, with IIS 6 it works great!
I am going to create application, in that application, i need feature of single sign on application.if i am login with 1 application, i suppose to login with others application.ex. if i login in gmail, then i automatically login with You Tube...
View 1 RepliesI'm analizing this situation:
-I've ASP.NET intranet application
-I've to centralize users' passwords in my domain and have visibility of them.
-Each user must change his own password each 3 months.
-Each user must have only one password for the access to Windows,Intranet application and ERP application
Is there a way to block all user accounts periodically and asking them to insert the new password after the logon to windows?after that i could make a query that update the passwrod in Intranet and ERP application.
I have two .NET applications X and Y
a. I want to have User A as a common user for both application X and Y.
b. User A can have different roles on X and Y. Eg. Read permission on Y and Write Permission on Y.
How do i configure ASP.NET membership to achieve about functionality.
I'm building a web application that most allow the user to digitally sign PDF documents with certificates installed in the client machine.
The document, once signed, should be posted back to the server, where it will store the signed version.
The server is running Classic ASP/ASP.NET
I have developed an web application which use cookies to store data. I need to clear cookies on sign out from application.I am new to asp.net. How can i clear cookies.
View 3 RepliesI want to use my asp.net mvc application with multiple domains (maybe of hundreds),
so I have created custom Route class that matches requests including domain.
Each domain could has different routes, so the number of routes in RouteTable can be huge
(eg 500 domains, each 20 routes = 10000 routes in RouteTable).
I am considering how it will be efficient?
I have an idea to replace RouteTable.Routes (of type RouteCollection)
with custom one (of type Dictionary<string, RouteCollection>).
But how I can override default route matching mechanism with my custom mechanism which will be two step:
1) retrieve RouteCollection from dictionary based on domain name
2) retrieve specyfic Route object (standard route matching mechanism)
How can I do this?
In my application i used .resx files. Now i need to deploy my application in a single dll. Once i deploy and add this dll as a refernce in other client applications then the culture specific dlls are added under Bin directory in client application. I don't want this to happen. Should i embed or link the satellite assembly in my applicaion to avoid this? if so how to do this?
View 3 RepliesI am very new to silverlight application. I have to create silverlight based website . Each page contains each silverlight application. Let me know how to do that. How to integrate on single webpage.
View 2 RepliesI have basic Single Sign-On working across 2 MVC sites (call them SiteA and SiteB) using something along the lines of the following method:http://forums.asp.net/p/1023838/2614630.aspxThey are on sub-domains of the same domain and share hashencryption keys etc in web.config. I've modified the cookie so it is accessible to all Sites on the same domain. All of this seems to be working ok.The sites are on separate servers without access to the same SQL database, so only SiteA actually holds the user login details. SiteB has a membership database, but with empty users.This works fine for my required scenario which is:1) User logs into SiteA2) The application loads data from SiteA (by AJAX) and SiteB (by AJAX using JSONP)I have the following LogOn Action on my AccountController for SiteA, which is where the "magic" happens:
[HttpPost]
public ActionResult LogOn(LogOnModel model, string returnUrl)
{
[code]...
we have developed a ASP.NET application that required a username and password to login and use the application.Now on of our customers wants to use Single Sign on with their Microsoft Sharepoint Portal.
Basically they want their users to be able to login to the portal, and then be able to access our application, without having to provide their login details again.Does anyone have experience with implementing Single Sign on?
I have a web app located at [URL] and I have several domains, such as [URL], [URL], etc. all pointing to the same directory in IIS. I use Host Headers to acheive this by setting the 'Host Header Values' under properties for the main site (under the Web site identification section). Based on the host header value I perform different functions in my pages.
Because of the way I have it set up, all the domains share the same files, web.config, etc. I have set the 'machinekey' in my web.config and have forms authemtication. However, when I go to MyMainSite.com and log in and then the user clicks a link and gets directed to MyFirstSite.com the user is shown as logged out. I need the user to be logged in and I need to be able to access the logged in user profile to display certain information. I thought by setting the 'machinekey', i could acheive this, but it does not seem to work.
how to go about having a single log on for my users?
The articles I have found show the same domain or have different domains each with a different web.config. The way they describe does not seem to work for me.
How to implement Single sign on in asp.net web application.
Give me to full tutorial. How to implement this in two apps.
m using visual studio 2008.my requirement is to implement single sign on across many domains without using cookies. is this possible?for example, i have 3 domains (hosted in 3 different systems).[URL]i implemented single sign on with cookies, if the sites are hosted in single system then it is working. but it doesnt work if cookies are disabled.i tried all made all possible google searches, but couldnt find anything useful.
View 2 RepliesI am trying to get this to work, and having a heck of a time.
I want users who log into my site to be able to access the KickApps site I created using single sign on.
They provided a helper code:
http://www.kickdeveloper.com/images/stories/docs/KickApps.cs
And the sample code is at the top of that.
It will not give me a response back other than "Nothing"
I am new to web services and single sign-on, and any help would be greatly appreciated. I am using the standard log-in system for vs, and want it so that after they log in, and load my special page, it redirects them to the kickapps app, where they are already signed in.
I would like to know how to implement Single Sign On across subdomains running on a mixture of programming platforms, asp.net and php?
View 1 RepliesI've only worked with web services a little bit. I am working on a project now using another developer's code as a template. It is code for a single sign on (SSO).
Here is a code excerpt:
Code:
namespace xxxxxxxSSO {
/// <summary>
/// Summary description for xxxx
/// </summary>
[WebService(Namespace = "http://tempuri.org/")]
[Code] ....
Also let me say, I have been coding in VB6/VB.NET for the past six years and am learning C# (that is what the other developer's code is written in).
setAppCredentials() is the beginning of a lot of sub-calls and I have gotten that all to work when I was running the service from within its own Visual Studio project.
Where I am having the problem is setting credentialHeader.Username and credentialHeader.Password. credentialHeader is nothing when I call validateCredentials().
I didn't see how I had these exposed to me in order to set them. So the developer said Create a client that consumes that service and set the values there and call your method.. But I still don't see how it's exposed to my consumer. I have this line of code in the consumer
Code : Dim myWebService As New localhost.xxxMemberService
(Back to VB!,) but I still don't see credentialHeader exposed.
The only other thing I see in the webservice code that might be relevant is this:
Code:
/// <remarks/>
[System.CodeDom.Compiler.GeneratedCodeAttribute("System.Xml", "4.0.30319.1")]
[System.SerializableAttribute()]
[System.Diagnostics.DebuggerStepThroughAttribute()]
[System.ComponentModel.DesignerCategoryAttribute("code")]
[Code] ....
which is in a file called referenes.cs.
to host two web applications in single application domain? For example two web applications web1 and web2 being hosted in single application domain.
View 3 RepliesI'm building a new n-tier web application and I would like to know the performance differences between developing my tiers in one single assembly (each tier with its own namespace) or into different assemblies, one for each tier.
View 1 RepliesIs it possible to have a single master page used in two web app?
Or would it be possible to get the virtual path pointing to different app though I don't think so?
How can i use a single connection in one web application. Right now i have to create a different connection for every data interchange with SQL. For example: For inserting a data i am creating a connection on button click event. And for fetching a record, i have to create a different connection for data grid view. create a single connection and can use the same connection under complete application.
View 5 RepliesI'm using .resx file in my project. when i build the application the satellite assemblies are created under bin directory. If i add this dll in other application then these satellite assemblies are added in other application bin directory. I want to add only the dll reference, not any other dlls so how to create a single dll for this scenario?
View 1 Replies