Take the 2-minute tour ×
Stack Overflow is a question and answer site for professional and enthusiast programmers. It's 100% free, no registration required.

Context:

I have an ASP.NET WebForms Website (not a Web Application) that I'm reimplementing in a new ASP.NET MVC Web Application with a new CMS. These sites will have the same second-level domain, but different host names (e.g. site1.site.com and site2.site.com).

The WebForms site is quite large, so I'll be migrating parts of the WebForms site over to the MVC site over a long period of time. Once all of content of the WebForms site has been moved over to the MVC site, the WebForms site will be retired, and both host names will point to the MVC site.

Problem:

The WebForms site uses Basic Authentication and the MVC site uses Forms Authentication. Both talk to the same authentication service on the backend, and take the same credentials from the user.

I don't want users to have to sign in to these sites separately; they should only see one sign in prompt. This appears to be possible if both sites use Forms Authentication, but is it possible to set this up when one site uses Forms Authentication and the other uses Basic Authentication?

Specifically, is it possible for a user to sign in to the site using Forms Authentication and be authenticated on the Basic Authentication site, and vice versa?

share|improve this question
1  
If you want to keep two different authentication methods on both sites, this could be difficult if not impossible. –  Wiktor Zychla Aug 27 at 19:51
    
Changing the WebForms site to use Forms Authentication is something I'm considering, but I wanted to investigate the alternatives first. –  user467384 Aug 27 at 20:00
1  
I suggest you create yet another site that acts as a central authentication service and exposes an oauth2 or ws-federation endpoints. This way, federating all your services around the one suddenly becomes easy. –  Wiktor Zychla Aug 27 at 20:07

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.