Use ASP.NET authentication with ColdFusion

[fireworld2406]

Hello----
My website that I am working on uses both ASP.NET and ColdFusion. The entire site is password protected, both the ASP.NET part and the ColdFusion part. The login part is handled by ASP.NET. How can I pass the credentials provided in the ASP.NET part to the ColdFusion part (if it is possible)? It would be much more user friendly for login to only be required once (in the ASP.NET part).

If it is not possible, do you have any other suggested solutions?

Thanks for your help!

[Fetch]

There is no way to pass the credentials back and forth between two different languages like that which I am aware of, however you could use Integrated Windows authentication, as outlined here

http://www.hostmysite.com/support/dedicated/IIS/passwordprotect/?utm_source=bb

and that will cover all the files in a specifc folder and it's subfolders. Granted, this may not be ideal depending on whether or not you have a generic userid that you want people to use or a small number of users or a large number of users...

[fireworld2406]

Thank you for replying!

I looked at the website you provided, and this leaves me with another question:

I would prefer to use forms-based authentication. I found this page on MSDN:
http://msdn.microsoft.com/en-us/library/aa480476.aspx

Would this work also? It seems like it would, but I just want to make sure.

Thanks for your help so far!

[Gene_Godsey]

Grab the cgi information form the J2EE server. If you are in an active directory environment you simply get the cgi.auth_user to get the networkID and log that against LDAP of your own data source.

[fireworld2406]

So essentially I check for the presence of the cgi.auth_user, if it exists, then I compare the value to an AD or other LDAP source, and log the user in into ColdFusion?

Two more questions:
1) Does it have to be an AD or LDAP source, or can I use an SQL database (Oracle XE)
2) How secure is this method?

Thank you for your help so far! It has been very helpful