Skip to main content
Participant
December 31, 2008
Question

Use ASP.NET authentication with ColdFusion

  • December 31, 2008
  • 2 replies
  • 841 views
Hello----
My website that I am working on uses both ASP.NET and ColdFusion. The entire site is password protected, both the ASP.NET part and the ColdFusion part. The login part is handled by ASP.NET. How can I pass the credentials provided in the ASP.NET part to the ColdFusion part (if it is possible)? It would be much more user friendly for login to only be required once (in the ASP.NET part).

If it is not possible, do you have any other suggested solutions?

Thanks for your help!
    This topic has been closed for replies.

    2 replies

    Gene_Godsey
    Inspiring
    January 5, 2009
    Grab the cgi information form the J2EE server. If you are in an active directory environment you simply get the cgi.auth_user to get the networkID and log that against LDAP of your own data source.
    Participant
    January 6, 2009
    So essentially I check for the presence of the cgi.auth_user, if it exists, then I compare the value to an AD or other LDAP source, and log the user in into ColdFusion?

    Two more questions:
    1) Does it have to be an AD or LDAP source, or can I use an SQL database (Oracle XE)
    2) How secure is this method?

    Thank you for your help so far! It has been very helpful
    Participating Frequently
    December 31, 2008
    There is no way to pass the credentials back and forth between two different languages like that which I am aware of, however you could use Integrated Windows authentication, as outlined here

    http://www.hostmysite.com/support/dedicated/IIS/passwordprotect/?utm_source=bb

    and that will cover all the files in a specifc folder and it's subfolders. Granted, this may not be ideal depending on whether or not you have a generic userid that you want people to use or a small number of users or a large number of users...
    Participant
    January 1, 2009
    Thank you for replying!

    I looked at the website you provided, and this leaves me with another question:

    I would prefer to use forms-based authentication. I found this page on MSDN:
    http://msdn.microsoft.com/en-us/library/aa480476.aspx

    Would this work also? It seems like it would, but I just want to make sure.

    Thanks for your help so far!