Hi all
I have an ASP.NET app ('Insight') which uses standard ASP.NET forms authentication. The powers that be in my company have decided that they want users of a third party site to be able to use Insight without logging in, on the basis that they are logged in to the third party site.
So, there needs to be some way to pass across to Insight a signal that the user is logged in to the third party site, so that Insight can consider them authenticated.
At the moment I know nothing at all about the third party site; not even the platform it was created on.
Can anyone suggest a means of doing this with the least security risk?
Thank you
David
...
Go to the complete details ...