Hello security experts! I am a security novice, so be gentle. What I have is an application where the data for each customer lives in its own database but they share a codebase. I have a connectionstring for each customer stored in the web.config. What I want to do is add security to this system using the built in asp.net security. However, I don't want the security data to live in just one table, I want the security information for Customer1 to live in Customer1's database, the security information for Customer2 to live in Customer2's database. This way if Customer1 has a user John Smith and Customer2 has a user Jane Smith they both can register the username jsmith. Is this possible? If so, what needs changed?
Thanks for any pointers.
...
Go to the complete details ...