Hi,I have a database server storing only user credentials. I need to create login facilities, such as change password, login, change password etc.. for a website,(which will have it?s own database) and will just use the first database server for credentials.What I?ve thought of is:1) Create a WebService project that will export the data I need from the credentials database. Basically will try to mimic the methods used by the membership provider.2) On the website project, create my own membership provider, overriding the methods, and making calls to the WebService methods.I´d just like to know if the are any security issues that I have not taken into account.Thanks (I´ve done a few tests and have realised that returning a membershipUser object from a webService call, will omit a lot of information. I suppose this is down to security issues. )