I have a website built which uses an SSL certificate and ASP.NET 2.0 login controls to secure it.
My client has another website (on a separate server) which they recently requested I integrate the login with.
So... user logs into my site and needs to click on a link which will take them to the other site passing their authentication with it so they don't have to re-login in.
I'm able to work with the other server so I could synchronize passwords or whatever else would be needed. I'm just not sure what the best way to pass the authentication data is. Should I just encrypt it and pass it via HTTP POST? Or could I set a temporary cookie on one server and check for it's presence on the 2nd server to authenticate?
I don't need anyone to write the code for me... just a gentle push in the right direction would be great. If anyone's done something similar I'd love to hear how you accomplished it ...
Go to the complete details ...