Frameset prevent Asp.net authentication?

[Jerron]

I'm developing a web application embeded into my customer's existent web
site. they two sites are on hosted in different computers. the customers's
web site uses frameset. by clicking a link in the menu bar frame, the user
will see my application.

the strange thing happens here: if I use the "target=_blank", to jump out of
the frameset, as it is now, everything works as expected. but, if I remove
that attribute, my web application can't go through the login procedure when
it is in an other frame.

I use the form authentication. in the debug, I saw after I called the
FormsAuthentication.RedirectFromLoginPage method, the User.Identity.Name is
still empty, and Request.IsAuthenticated is still false, until I put the web
application in a standalone browser, without any framset.

I did a search but didn't find any helpful clue on this issue yet. can
anyone tell me what caused this problem and what is the workaround? thanks a
lot!


Jerron

 

[vMike]

The problem might be with third party cookies. Depending on the browser
setting, third party cookies won't be accepted in a frameset or iframe. I
don't know of anyway around it other than changing the browser setting or
being a trusted site.