Authentication via different servers

[Giles]

We have a web site where the user logs in and a session variable is set,
which allows access to all pages via an include at the top of every page (
if session("LoggedInOK")<>"Yes" etc)

We have some content on another unrelated server in a different domain that
we would like automatic access to, if the login is OK for site 1, without
re-entering a login. Even better would be if some other session variable
data could be transferred at the same time (like username). Navigation would
be via hyperlinks on site 1. Is there a simple way to do this? i.e. has this
wheel already been invented? (Encrypted querystrings? XMLHTTP?)

Thanks
Giles

 

[Patrick Kremer]

XMLHTTP would be one good way to grab it. Check out
http://www.4guysfromrolla.com/webtech/110100-1.shtml
for a starter on how to make it work.

You could configure the second server to permit access to the protected
content based on the 1st servers IP address, or you could use the XMLHTTP
object to pass an authentication token i.e.
xml.Open "GET", http://www.myserver.com/mycontent.asp?secretpassword=foo

Using XMLHTTP avoids the need for an ugly, long encrypted querystring in the
user's URL.