Unfortunately, you have to know what you want to do here.
How something is "usually done" may have no impact on your setup/
environment -- because are your websites a duplicate of how something
is "usually done"?
And it is especially sensitive since it is your websites security that
you are talking about.
Single sign-on is a server-side notion that once an user signs on to a
website (doesn't matter what server) with one authentication protocol,
the protocol allows the user to be considered "signed in" to another
website using the same authentication protocol. i.e. using Windows
Live ID across many websites.
Auto-Login is a client-side notion that the browser should attempt to
sign-in with certain protocols and username/passwords when users visit
certain designated websites. i.e. the Automatic Login option in IE for
certain Internet Zones
Since you are talking about cross-site authentication, details like
"multiple sites on the same server" and "file permission/groups" are
not relevant -- they are aspects of authorization and hosting that do
not enter into the authentication picture.
//David
http://w3-4u.blogspot.com http://blogs.msdn.com/David.Wang //
On Jun 12, 5:14=A0am, E-Double <EDou...@discussions.microsoft.com>
[quoted text, click to view] wrote:
> I am not sure as we have not secured too many sites before - how is it
> usually done when using file permissions to set the security groups in IIS=
6
> (and across multiple sites on the same server)?
>
> e.
>
>
>
> "David Wang" wrote:
> > On Jun 10, 5:51 am, E-Double <EDou...@discussions.microsoft.com>
> > wrote:
> > > On an Win2003/IIS 6 server hosting multipe sites, when file level perm=
issions
> > > and groups are used to set the access control - is there some way to p=
ermit a
> > > person who is in one group with access permissions and that has alread=
y
> > > signed-in to one of the sites to access a second site on the same IIS =
server
> > > (from a link on the first site) that has the same file/group permissio=
ns set?
> > > =A0For some reason it prompts for the user name and password again eve=
n though
> > > the person has already authenticated to one of the groups on the first=
site
> > > that also has access to this second site. =A0TIA ...
>
> > > p.s. I am not sure if this was the case with earlier versions of IIS (=
?).
>
> > Are you asking about Single-Sign-On or Auto-Login?
>
> > //David
> >
http://w3-4u.blogspot.com > >
http://blogs.msdn.com/David.Wang > > //- Hide quoted text -
>
