Sharing login state among applications in Intranet

2003-06-18 Thread John Sprenkle
We are using ColdFusion MX to develop a small Intranet. We need to have a single
login to be shared by several applications within the Intranet. I have seen
references that suggest using the APPLICATIONTOKEN attribute of the 
tag to accomplish this. However, none of the references go into detail. We have
attempted to make the value of this attribute the same in all applications, but
it didn't seem to work.
One suggestion we received said to make the application name the same in all of
the Application.cfm templates for each application along with using the
APPLICATIONTOKEN attribute.  Though this seemed to work, we don't know if this
is the best alternative.
Can anybody direct me to an example of how this is used? Are we taking the right
approach to this?

Thank you. 
John Sprenkle






The information contained in this message or transmission may be privileged
and/or confidential and protected from disclosure.  If  the  reader of  this
message is  not the  intended  recipient (or an  employee or  agent  responsible
 for delivering this  message to the intended recipient) you are notified that
any dissemination, distribution or copying of this communication is strictly
prohibited, as is the taking of any action in reliance on the content of this
message or transmission.  If  you  have  received  this  communication  in 
error, please notify us immediately by replying to the message and deleting it
from your computer.  Thank you.


~|
Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4
Subscription: 
http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq

This list and all House of Fusion resources hosted by CFHosting.com. The place for 
dependable ColdFusion Hosting.
http://www.cfhosting.com

Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4



Sharing login state among applications in Intranet

2003-06-18 Thread John Sprenkle
The APPLICATIONTOKEN was not working in that when we would go to another app, the user 
gets re-prompted to enter the login and password.  Now that we made all of the app 
names the same in each Application.cfm, it is working.  But like you said, we don't 
know if this is the best solution.  Right now, each app is in its own sub-directory 
with its own Application.cfm.  Perhaps we should make one Application.cfm in root 
directory?  Should the APPLICATIONTOKEN be working with mulitple Application.cfm 
files?  Thanks for your continued help.
~|
Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4
Subscription: 
http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq

Get the mailserver that powers this list at 
http://www.coolfusion.com

Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4



Sharing login state among applications in Intranet

2003-06-18 Thread John Sprenkle
It sounds like what you are doing is much more complex than what we need, but thank 
you.  I guess what I need to know is how multiple applications are usually set up.  
Like I said, each app is in its own directory with its own Application.cfm.  A user 
who logs in the main application may have rights to other applications and we don't 
want him to have to separtely log into each site, but just log in once and be able to 
go to the applications he wants.
~|
Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4
Subscription: 
http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq

Get the mailserver that powers this list at 
http://www.coolfusion.com

Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4



Sharing login state among applications in Intranet

2003-06-18 Thread John Sprenkle
We would like to keep the apps in separate directories for easier maintenance.  What 
we are looking for is for a user to log into a main application.  From here, menu 
options would be available to other apps based on their assigned role.  We have this 
set up.  It just that when they try to go to another app, they must log in again.  We 
just want them to log in once because the login does not carry.There has to be a 
standard way 
to accomplish this.  

Thanks for your continued help.
~|
Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4
Subscription: 
http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq

Your ad could be here. Monies from ads go to support these lists and provide more 
resources for the community. 
http://www.fusionauthority.com/ads.cfm

Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4



RE: Sharing login state among applications in Intranet

2003-06-18 Thread Raymond Camden
Can you describe how applicationToken was not working? I would recommend
against using the same application name for all your applications if it
does not make sense. Ie, should they all be the same app? If so, then go
ahead and use the same name, or even better, use ONE file, and have
'sub' apps cfinclude the root application.cfm.


===
Raymond Camden, ColdFusion Jedi Master for Mindseye, Inc
(www.mindseye.com)
Member of Team Macromedia (http://www.macromedia.com/go/teammacromedia)

Email: [EMAIL PROTECTED]
Blog : www.camdenfamily.com/morpheus/blog
Yahoo IM : morpheus

"My ally is the Force, and a powerful ally it is." - Yoda 

> -Original Message-
> From: John Sprenkle [mailto:[EMAIL PROTECTED] 
> Sent: Wednesday, June 18, 2003 9:12 AM
> To: CF-Talk
> Subject: Sharing login state among applications in Intranet
> 
> 
> We are using ColdFusion MX to develop a small Intranet. We 
> need to have a single login to be shared by several 
> applications within the Intranet. I have seen references that 
> suggest using the APPLICATIONTOKEN attribute of the  
> tag to accomplish this. However, none of the references go 
> into detail. We have attempted to make the value of this 
> attribute the same in all applications, but it didn't seem to 
> work. One suggestion we received said to make the application 
> name the same in all of the Application.cfm templates for 
> each application along with using the APPLICATIONTOKEN 
> attribute.  Though this seemed to work, we don't know if this 
> is the best alternative. Can anybody direct me to an example 
> of how this is used? Are we taking the right approach to this?
> 
> Thank you. 
> John Sprenkle
> 
> 
> 
> 
> 
> 
> The information contained in this message or transmission may 
> be privileged and/or confidential and protected from 
> disclosure.  If  the  reader of  this message is  not the  
> intended  recipient (or an  employee or  agent  responsible  
> for delivering this  message to the intended recipient) you 
> are notified that any dissemination, distribution or copying 
> of this communication is strictly prohibited, as is the 
> taking of any action in reliance on the content of this 
> message or transmission.  If  you  have  received  this  
> communication  in 
> error, please notify us immediately by replying to the 
> message and deleting it from your computer.  Thank you.
> 
> 
> 
~|
Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4
Subscription: 
http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq

Host with the leader in ColdFusion hosting. 
Voted #1 ColdFusion host by CF Developers. 
Offering shared and dedicated hosting options. 
www.cfxhosting.com/default.cfm?redirect=10481

Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4



RE: Sharing login state among applications in Intranet

2003-06-18 Thread Jim Davis
> -Original Message-
> From: John Sprenkle [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, June 18, 2003 11:27 AM
> To: CF-Talk
> Subject: Sharing login state among applications in Intranet
> 
> The APPLICATIONTOKEN was not working in that when we would go to
another
> app, the user gets re-prompted to enter the login and password.  Now
that
> we made all of the app names the same in each Application.cfm, it is
> working.  But like you said, we don't know if this is the best
solution.
> Right now, each app is in its own sub-directory with its own
> Application.cfm.  Perhaps we should make one Application.cfm in root
> directory?  Should the APPLICATIONTOKEN be working with mulitple
> Application.cfm files?  Thanks for your continued help.

For my work at NEF/MetLife I designed a system called
"CrossApplicationTrust" that defined several interfaces (using WDDX) to
pass encrypted identification information from application to
application.

Each application defines what information would be passed using a
distributed assertion system (I say I'll be giving this, and here's the
definition so you can test me).

The system remembers each application accessed and can provide for
aliasing to any application.  (It was designed originally to allow
customer service reps to access customer screens as customers without
losing their identities in the process).

As long as encryption key management can be dealt with the system works
across servers/sites and application platforms (although only a CF
implementation is currently fully working we've also done partial
implementations in Java and ASP).

It sounds like it may be too complex for what you're doing, but if not
drop me a line and I can tell you more about it.

Jim Davis
President, http://www.depressedpress.com
Webmaster, http://www.firstnight.org
Webmaster, http://www.cfAdvocacy.org
Senior Consultant, http://www.metlife.com

~|
Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4
Subscription: 
http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq

Your ad could be here. Monies from ads go to support these lists and provide more 
resources for the community. 
http://www.fusionauthority.com/ads.cfm

Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4



Re: Sharing login state among applications in Intranet

2003-06-18 Thread coldfusion . developer
Thanks.  This reply gave me a better idea than I first thought of.  Instead of 
creating different directories for each user, create one directory with all the 
applications and just identify the user by login information.  As long as the 
login allows or prevents access I won't need the separate directories.

I'm still thinking about adding different functionality for these various 
users.  

D-

Thanks.
> It sounds like what you are doing is much more complex than what we need, but 
> thank you.  I guess what I need to know is how multiple applications are usually 
> set up.  Like I said, each app is in its own directory with its own 
> Application.cfm.  A user who logs in the main application may have rights to 
> other applications and we don't want him to have to separtely log into each 
> site, but just log in once and be able to go to the applications he wants.
> 
~|
Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4
Subscription: 
http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq

Host with the leader in ColdFusion hosting. 
Voted #1 ColdFusion host by CF Developers. 
Offering shared and dedicated hosting options. 
www.cfxhosting.com/default.cfm?redirect=10481

Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4



Re: Sharing login state among applications in Intranet

2003-06-18 Thread Scott Weikert
At 01:18 PM 6/18/2003 -0400, you wrote:
>We would like to keep the apps in separate directories for easier 
>maintenance.  What we are looking for is for a user to log into a main 
>application.  From here, menu options would be available to other apps 
>based on their assigned role.  We have this set up.  It just that when 
>they try to go to another app, they must log in again.  We just want them 
>to log in once because the login does not carry.There has to be a 
>standard way
>to accomplish this.

Why not pass the login info over as you're leaving one app, to the other, 
then set up the session in the second application off that data as if the 
user had logged in directly? Pass their login and some sort of other 
internally-generated 'confirmation' value - I wouldn't go passing their 
password around.

~|
Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4
Subscription: 
http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq

This list and all House of Fusion resources hosted by CFHosting.com. The place for 
dependable ColdFusion Hosting.
http://www.cfhosting.com

Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4