Single Sign On in existing website

Dear Riddhi

Sorry for this long thread!

To implement SSO you can do via multiple ways

- Using ads credentials, so C# provides way to read user's Ads credentials and if the user is part of your ADS (Active directory services) then the user will be authenticated automatically. Now once authenticated, you can keep user's information in session variable like Session.isAuthenticated = true and you can check this property at major events.


- As you're using Oracle, you can create User table in database and store user's name & passwords. Now you can compare against database and check user's authentication. Once authenticated you can again keep the information in session.

Session works by creating cookie inside and this cookie is passed with each interaction with the website (server). Because HTTP is stateless protocol. 

Session can be saved in three ways:
 - At database
 - At IIS
 - ASP state management service

Thanks!
Please accept answer if you find it helpful!