One logon -- multiple servers

Allow users to login once to access to multiple sites on multiple servers

[jpbatliner]

I am in an environment that has multiple servers running multiple technologies.

Our users come in through a main site and enter a user ID and Password that is validated against a lotus notes database. (I believe that this site is hosted by a notes server since the web pages have a .nsf extension.) Once they log into that site they need to be able to go to various other applications that are on different servers.

One in particular is an IIS server running ASP code. This site has different profile driven access that needs to be controlled by the login previously mentioned. (We do not want our users to have to login more than once.)

Is there a way to do this? If so how do I pass the session/state data to the other site/server safely?

Thanks in advance!

[ddent]

You are going to want to pass along the session information with cookies, or with links with the information in them, or with image tags that set a remote cookie.

You'll also want to either use a simple technique to sign it (e.g. md5 w/timestamp & random shared secret), or depending on the information being tossed around, potentially encrypt it as well.