I would like to pass the user name and password into an agent or web service which would authenticate to the domino server and then redirect to a specific database url.
Ideally it will create a session cookie.
Basically, I want to authenticate a user without them seeing the authentication page. The user will be coming to my application from a central portal written in .Net. They will have already authenticated to the portal using AD credentials. I want to pass those credentials to my domino server.
Subject: Domino Authentication
Hi,
I think you probably have two ways to go about this. Firstly though a little background. The problem you are going to have is that http is connectionless. So the credentials of the user must be passed to your domino server on every page load. Because the credentials are passed from the browser I think you may have two approaches.
1 ) Use IIS as your domino http stack. That way IIS can handle the password integreation issues for you. You need to correctly configure Domino and IIS (see Admin help for this) and you need to make sure that users have their network login in listed in the FullName field of their user document.
2 ) Use a session cookie. The problem then is that you need to be able to authenticate the user based on this cookie on the domino server. Without the user going to the standard forms based domino server login the only way to use a session cookie for authentication is to write your own DSAPI handler and install it on your server.
I previously worked on a system where an apache server provided the authentication system and set a domain wide session cookie. This cookie was then read by a DSAPI filter and used to authenticate the users.
The problem with this approach is that:
a ) It is complicated.
b) You need someway of keeping your domino and other password in sync.
c ) All systems need to agree on a cookie encryption scheme, if you already have a existing .net system this may be a stumbling block.
Hope this helps you out a bit.