As a little project, I developed a hardware-based key that would allow a user to be programatically logged into an ASP.net site using forms authentication, totally bypassing the username/password login if the key is in the clients pc at the time of "login". Kind of proud of it, personally. But at work, we have IIS using Windows Authentication (NTLM). Been reading all afternoon and I still can't decide if I could adapt my key to work with NTLM or not. Does anyone know if it would be possible to do something similar to what I'm doing with a forms-based site on a NTLM only based site? That is, use alternative verification first and prompt for username and password only if that fails...or conditions aren't met.
Any input would be greatly appreciated. Thanks
...
Go to the complete details ...