|
Posted by Roger Abell [MVP] on January 20, 2006, 4:33 am
Please log in for more thread options
What does "online application" mean ??
If this is a web based applicating (i.e. http served) then you
should look into implementing ADFS in its v1 incarnation that
released as a part of Windows Server 2003 R2
Active Directory Federation Services (ADFS) is designed for
exactly the scenario you have described (assuming web application
as that is all that v1 supports), including leaving the responsibility
for authentication of students and of authorization for them to use
the application with their respective organizations. The host realm
of a resource makes a policy agreement with the accessing realms
that grants them the responsibility over access control using their
AD credentials.
> Hi, could someone please offer me some advice about authenticating users
> from a different domains.
>
> Scenario: -
> A new online application that students from 5 different universities
> require
> secure access to. The number of students would be around 6000 per year.
> The
> universities have their own networks, servers etc. that their students are
> authenticated against (mostly active directory).
>
> Ideally, we would want to leave the authenication headache with the
> universities e.g. have the student login with their university
> credentials,
> which would then allow them secure access to data on a centralised server
> sitting on a complete seperate network.
>
> I would very much welcome any advice/guidance you could offer.
>
> Vassone.
>
>
|