Quantcast
Channel: Security
Viewing all articles
Browse latest Browse all 4737

Cross domain authentication in asp.net Identity - Will it meet this scenario?

$
0
0

Lets say a company FooBar Theatres Inc. owns a number of theatres, each with their own web site, and each site has their own bookings system, which is a actually a re-skinning of the exact same ticketting order process, so..

  https://LondonTheatre.com/buytickets
  https://ParisTheatre.com/buytickets
  https://NewYorkTheatre.com/buytickets

Users do not log on - in fact there is no "login" available - i.e they just follow the steps to purchase tickets.

Now, lets say the company wishes to allow ticket agencies to book tickets on account, by first logging into https://FooBar.com/AgencyLogon and then clicking through to the same links available to the public, but then not going through the payment stage, but instead some other final step as they are charging it to their account. 

Only FooBar Inc employees can create Agency logins - i.e. an agency cannot create their own login, for obvious reasons.

Is this scenario available with asp.net identity? All examples I have seen so far are from the point of view of only having one domain. 


Viewing all articles
Browse latest Browse all 4737

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>