5

We have a .net application which uses asp.net SQL membership provider for authentication purpose. We are now introducing a java application which needs to be integrated with the .NET application in terms of authentication, so users wont have to login again going from the java to the .net application. What would be the best approach to a SSO solution?

I would greatly appreciate your input.

Thanks.

Improve this question

2 Answers 2

Reset to default
2

Well, let's look at what we know:

  1. Authentication code for ASP.NET is done using Membership API (.NET)
  2. Java web site needs to access this code

So, in order for 2) to happen, you need to do the following:

  • Expose .NET Authentication code on Web Site A (ASP.NET)
  • Consume .NET Authentication code on Web Site B (Java)

If your >= .NET 3.0, i'd recommend WCF, if not, you're stuck with classic ASMX.

Expose operations (SignIn, SignOut, etc) via the WCF/ASMX Service which can then be consumed by the Java client (JSON would be best, but could always use XML/SOAP).

There is a really nice 4-part tutorial on SSO with WCF here.

Even if you don't end up going with WCF, the tutorial still has a lot of helpful info.

HTH.

Improve this answer
Sign up to request clarification or add additional context in comments.

3 Comments

Thanks for your quick reply.If the entry point for a user is the java app where they type in their username/pwd and which is validated using WCF, would they have to login again when they land on the .net application. I know that if both the applications are .NET, the auth cookie generated by the .net framework allows users to go from one app to another with re logging in. Is that same case with this solution?
"one app to another with re logging in" - i meant without re-logging in.
Yes, you just need to use custom auth cookies, not the regular ASPX auth. Facebook does a very similar thing with Facebook Connect - after you login to facebook, when you go to a Facebook-Connect-site, it checks with Facebook if the user is authenticated (asks forcookies).
1

You could also call the membership provider stored procedures from the java application.

Improve this answer

Comments

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.