CODEWITHSUNDEEP
asp.netsqlweb-servicessingle-sign-on
July13
July13

Reputation: 3

Single log in for multiple sites developed on different platform(s)

Our company has 5 product sites developed using ASP.net,PHP,Flex, etc and most of them has common users.The requirement is to avoid multiple logins when the same user accessing these websites. We have different databases for authentication for each site. Only registered users can able to go to the respective websites.

What would be the simple and easy approach for doing this? Cookies doesn't work because of different platform(s) . I would like to use ASP.net/c#/SQL server for the development. There are different SSO's are available in the market ( SAML 2.0 with componentspace libraries), but not sure it is needed in our case.

Upvotes: 0

Views: 220

Answers (1)

Leon
Leon

Reputation: 3401

The way this can be implemented is with Claims Based Authentication.

Basically, you will generate a token of some kind that would follow the user from system to system. (Encrypted, validated some how coming from a trusted source.)

Using that token, each system can authenticate the user and authorize access if successful.

This is similar to how some websites (like StackOverflow) will let you log-in with a Google or Facebook account without creating an individual account. Then when you login, FB or Google issues a token (aka claim) that you are who you say you are. Because StackOverflow trusts Google, they accept the Claim (promise) that you are, in fact you.

Upvotes: 1

Related Questions